md77 Privacy Policy — How We Collect, Use, and Protect Your Personal Data
Your privacy matters to md77. This Privacy Policy explains exactly what personal information we collect when you use the md77 platform, how we use it, who we may share it with, and what rights you have over your own data as a player based in Bangladesh.
Our Privacy Commitments
md77 treats personal data as a responsibility, not a resource. Here is what that means in practice.
Secure by Design
All data transmitted to and from md77.io is encrypted using 256-bit SSL technology. Personal and financial information is stored on secured servers with restricted access, firewalls, and regular security audits to prevent unauthorised access or disclosure.
No Data Selling
md77 does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Data shared with third parties is strictly limited to what is necessary for platform operations, payment processing, and identity verification.
Your Rights, Respected
You have the right to access, correct, or request deletion of your personal data held by md77 at any time. Submit a data request to [email protected] and our team will respond within the timeframes set out in this policy.
Minimal Data Collection
md77 collects only the personal data that is genuinely necessary to operate the platform, verify identities, process transactions, and comply with legal obligations. We do not collect data speculatively or beyond what is needed for a defined purpose.
Opt-Out of Marketing
Players who no longer wish to receive promotional communications from md77 may opt out at any time by contacting support or updating their notification preferences within their account settings. Opting out of marketing does not affect transactional communications.
Defined Retention Periods
md77 retains personal data only for as long as it is necessary for the purposes it was collected, or as required by applicable law. Account data is typically retained for a minimum of five years following account closure in line with financial record-keeping requirements.
1 Introduction
md77 ("we", "our", "us", "the Platform") is committed to protecting the privacy and personal data of every player who uses md77.io. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the conditions under which it may be disclosed to third parties, and the rights you hold as a data subject.
This policy applies to all personal data processed in connection with your use of the md77 website and any related services, including sports betting, live casino, slots, account management, customer support, and marketing communications. By registering an account or continuing to use the md77 platform, you acknowledge that you have read and understood this Privacy Policy.
This policy should be read alongside the md77 Terms & Conditions, which govern the wider relationship between you and the platform. If you have any questions about how we handle your personal data, please contact us at the details provided in Section 12.
2 Data We Collect
md77 collects personal data from you in a number of ways, including data you provide directly, data generated through your use of the platform, and data obtained from third-party verification providers. The categories of data we collect are summarised below.
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, national ID number, passport number | Registration form, KYC documents |
| Contact Data | Email address, mobile phone number, residential address | Registration form, account settings |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, transaction amounts, deposit and withdrawal history | Payment processing, transaction records |
| Account Data | Username, account balance, betting history, game session logs, bonus activity | Platform activity |
| Technical Data | IP address, browser type and version, device type, operating system, time zone, session duration | Automatic collection via cookies and server logs |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Direct communication with our support team |
| Marketing Preferences | Communication opt-in/opt-out status, promotional preferences | Account settings, communication responses |
md77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where strictly required by law or specifically requested during identity verification with your explicit consent.
3 How We Use Your Data
md77 uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and administer your player account, including processing deposits, withdrawals, and bet settlements.
- Identity Verification (KYC): To verify your identity and age as required prior to processing withdrawal requests or when triggered by anti-money-laundering checks. Players must be aged 21 or older to use md77.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and prohibited activities as defined in our Terms & Conditions.
- Anti-Money Laundering (AML) Compliance: To monitor transaction patterns and report suspicious activity to relevant authorities where required by applicable law.
- Customer Support: To respond to your queries, resolve complaints, and provide technical assistance in connection with your use of the platform.
- Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion where appropriate.
- Marketing Communications: To send you promotional offers, bonuses, and platform updates where you have opted in to receive such communications. You may opt out at any time.
- Platform Improvement: To analyse usage trends, measure the effectiveness of features, and improve the overall performance and user experience of the md77 platform.
- Legal Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities.
md77 will not use your personal data for any purpose that is incompatible with the purposes described above without notifying you and, where required, obtaining your consent.
4 Legal Basis for Processing
md77 processes your personal data on the following legal bases, depending on the specific purpose for which data is being processed:
- Contractual Necessity: Processing that is required to fulfil our obligations under the Terms & Conditions you agreed to when registering your account — for example, processing deposits, settling bets, and managing withdrawals.
- Legal Obligation: Processing that is required to comply with applicable laws, including AML regulations, financial record-keeping requirements, and obligations to report suspicious activity.
- Legitimate Interests: Processing for purposes such as fraud prevention, platform security, and improving the quality of our services, where our legitimate interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and optional analytics, where we have obtained your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5 Cookies and Tracking Technologies
md77 uses cookies and similar tracking technologies to operate the platform, improve user experience, and gather analytical data. Cookies are small text files placed on your device when you visit md77.io. The types of cookies we use are described below:
- Strictly Necessary Cookies: Required for core platform functionality such as maintaining your login session, storing cart-state information, and ensuring secure navigation. These cannot be disabled without affecting how the platform works.
- Functional Cookies: Allow the platform to remember your preferences such as language, region, and display settings to provide a more personalised experience.
- Analytical Cookies: Used to collect aggregated, anonymised data about how visitors interact with md77.io, including pages visited, session duration, and error events. This information helps us identify areas for improvement.
- Marketing Cookies: Where you have consented, these cookies track your browsing activity to allow us to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time via your browser settings or by contacting support.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the performance or functionality of parts of the md77 platform.
6 Third-Party Sharing
md77 does not sell your personal data. We may share your data with trusted third-party service providers and partners only to the extent necessary to operate the platform and fulfil our legal obligations. The categories of third parties with whom data may be shared include:
- Payment Processors: bKash, Nagad, Rocket, Upay, and other payment service providers receive the minimum transaction data necessary to process deposits and withdrawals on your behalf.
- Identity Verification Providers: Third-party KYC and AML service providers may receive your identity documents and personal details to perform age and identity checks as required prior to withdrawal processing.
- Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account identifier and session data necessary to deliver game content and resolve game-related disputes.
- IT and Security Service Providers: Infrastructure, hosting, and cybersecurity partners who support the operation of md77.io under strict confidentiality agreements.
- Legal and Regulatory Authorities: Competent authorities, law enforcement agencies, and courts where disclosure is required by applicable law or a lawful court order.
All third-party service providers engaged by md77 are contractually required to handle your personal data securely, use it only for the specified purpose, and not retain it beyond what is necessary. md77 remains responsible for ensuring that third-party processing meets the standards described in this Privacy Policy.
7 Data Retention
md77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Active Account Data: Retained for the duration of your account registration and for a minimum of five (5) years following account closure, in accordance with financial record-keeping and AML compliance obligations.
- Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of five (5) years from the date of the transaction.
- KYC Documents: Identity verification documents are retained for the duration of your account and for five (5) years following account closure or the completion of the relevant verification process.
- Support Correspondence: Customer support communications are retained for three (3) years from the date of the interaction.
- Marketing Data: Marketing preference records and opt-in evidence are retained for the duration of your consent, plus three (3) years for compliance documentation purposes.
- Technical and Log Data: Server logs and technical access data are retained for up to twelve (12) months unless required for an ongoing security investigation.
Where md77 no longer has a legitimate purpose or legal obligation to retain your data, it will be securely deleted or anonymised in accordance with our internal data lifecycle procedures.
8 Data Security
md77 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures are designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.
Our security practices include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and md77.io.
- Encrypted storage of sensitive personal and financial data at rest.
- Role-based access controls limiting internal access to personal data to authorised personnel only.
- Regular vulnerability assessments and penetration testing of platform infrastructure.
- Multi-factor authentication requirements for administrative access to internal systems.
- Incident response procedures for detecting, reporting, and managing personal data breaches.
While md77 takes all reasonable precautions to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, md77 will notify affected players as promptly as practicable and take immediate remedial action.
You are responsible for maintaining the security of your own account credentials. md77 will never ask you for your password via email, chat, or phone. If you suspect your account has been compromised, please contact our support team immediately.
9 Your Rights
As a data subject, you have the following rights in relation to the personal data md77 holds about you. To exercise any of these rights, please submit a written request to [email protected]. md77 will respond within 30 days of receiving a valid request.
Please note that some rights are subject to limitations. For example, md77 may be unable to delete certain data that we are legally required to retain for AML or financial compliance purposes. In such cases, we will explain the specific reason for any limitation on the exercise of your right.
10 Children and Minors
md77 strictly prohibits use of the platform by any person under the age of 21. We do not knowingly collect personal data from anyone under the age of 21. If you have reason to believe that a minor has registered an account or provided personal data to md77, please contact our support team immediately at [email protected].
Upon receiving a credible notification that an account is held by a minor, md77 will suspend the account, conduct a review, and permanently close the account if the underage status is confirmed. Any funds held in such accounts will be dealt with in accordance with our Terms & Conditions and applicable law. md77 also encourages parents and guardians to use parental control tools to prevent minors from accessing online gambling platforms.
11 Changes to This Policy
md77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email and publish the updated policy on md77.io/privacy-policy with a revised "Last Updated" date.
We encourage you to review this Privacy Policy periodically so that you remain informed about how md77 is protecting your personal data. Your continued use of the platform following the publication of a revised policy constitutes your acknowledgement of the changes. If you do not agree with any updated terms of this policy, you should cease using the platform and may request account closure by contacting support.
12 Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or the personal data md77 holds about you, please contact our Data Protection team using the details below. All privacy-related requests will be acknowledged within 5 business days and fully responded to within 30 days.
Email: [email protected]
When submitting a data subject request, please include your registered username and the email address associated with your account so that we can verify your identity before processing the request. This step is necessary to ensure that personal data is not disclosed to an unauthorised party.
This Privacy Policy was last reviewed and updated in January 2026.
Ready to Play with Confidence?
Your data is protected, your account is secure, and md77 is ready to deliver Bangladesh's best online betting experience. Explore cricket, slots, live casino, and more.
21+ only. Gambling involves financial risk. Please play responsibly.