tf77 Privacy Policy — How We Protect Your Personal Data

1 Introduction

tf77 is committed to safeguarding the privacy and personal data of every player on its platform. Privacy is not treated as a compliance checkbox at tf77 — it is an operational principle that shapes how the Platform is built, how data flows are designed, and how player information is handled at every touchpoint, from first registration through to account closure.

This Policy is written in plain, formal English to ensure that players based in Bangladesh can clearly understand their rights and tf77's obligations. Where technical or legal terminology is unavoidable, we have provided contextual explanations. If you have any questions about this Policy that are not addressed here, you are encouraged to contact tf77's support team directly using the contact details provided in Section 14.

2 Data Controller

For the purposes of this Policy, tf77 acts as the data controller in respect of the personal data collected from players on the Platform. As data controller, tf77 determines the purposes and means by which personal data is processed and is responsible for ensuring that processing activities are carried out lawfully, fairly, and transparently.

All data rights requests, privacy complaints, and enquiries relating to this Policy should be directed to tf77's designated privacy contact using the email address listed in Section 14. tf77 will acknowledge all such requests within a reasonable timeframe and will endeavour to resolve them promptly and in good faith.

3 Personal Data We Collect

3.1 Registration Data

When you create a tf77 account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), email address, and mobile phone number. This information is required to create your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

3.2 Identity Verification (KYC) Data

As part of our KYC process, you may be asked to submit copies of government-issued identification documents (such as your National ID card or passport), proof of residential address, and proof of ownership of your payment method. These documents are processed securely for the sole purpose of verifying your identity and age, confirming your eligibility to use the Platform (21+), and meeting our anti-money laundering (AML) obligations.

3.3 Financial Transaction Data

tf77 collects records of all financial transactions conducted on the Platform. This includes deposit amounts, withdrawal requests, payment method details (such as your bKash, Nagad, Rocket, Upay, or bank account identifiers), transaction timestamps, and transaction statuses. Full payment card numbers are never stored by tf77 — card processing is handled exclusively by PCI-DSS compliant payment partners.

3.4 Gameplay and Betting Data

We collect data about your activity on the Platform, including the games you play, the bets you place, the outcomes of those bets, your session duration, stake amounts, and game preferences. This data is used to maintain accurate account records, calculate winnings and bonuses, detect fraud, and improve the Platform experience for Bangladesh-based players.

3.5 Technical and Device Data

When you access the tf77 Platform, our servers automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data is collected for security monitoring, fraud detection, and Platform performance optimisation purposes.

3.6 Communications Data

If you contact tf77's customer support team, participate in promotions, or respond to surveys, we retain a record of those communications, including the content of your messages and the dates and times they were sent. This data is used to resolve disputes, improve our support quality, and maintain a record of your interactions with tf77.

3.7 Responsible Gaming Data

If you use tf77's responsible gaming tools — such as deposit limits, cooling-off periods, or self-exclusion — we record and store those preferences to ensure they are enforced correctly across all sessions and devices. This data is treated with the highest level of confidentiality and is not used for marketing or profiling purposes.

4 How We Use Your Personal Data

tf77 uses the personal data described in Section 3 for the following specific purposes:

• Account Management: To create, maintain, and administer your tf77 account, including processing logins, managing account settings, and responding to your requests.
• Identity Verification: To verify your age (21+) and identity as required by our KYC policy and to prevent fraud and underage gambling.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard.
• Bonus and Promotion Administration: To calculate your eligibility for promotions, apply bonus credits, track wagering requirements, and prevent bonus abuse.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering, fraud prevention, and consumer protection requirements.
• Platform Security: To monitor for suspicious activity, detect and investigate fraud, and protect the integrity of the Platform and the safety of other players.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account-related matters.
• Service Communications: To send you transactional notifications such as deposit confirmations, withdrawal updates, and security alerts. These communications are essential to the operation of your account and cannot be opted out of while your account is active.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about new games or features. You may withdraw this consent at any time by contacting our support team.
• Responsible Gaming Enforcement: To enforce deposit limits, cooling-off periods, and self-exclusion preferences you have set on your account.
• Platform Improvement: To analyse aggregated, anonymised usage patterns in order to improve the Platform's design, performance, and game selection for our Bangladesh-based player community.

5 Legal Basis for Processing

tf77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, KYC documents, financial transaction records, and gameplay data is necessary to perform the contract between you and tf77 — specifically, to provide you with access to the Platform's betting and gaming services.
• Legal Obligation: Processing for KYC verification, anti-money laundering checks, and record-keeping is required to comply with applicable legal obligations.
• Legitimate Interests: Processing for fraud prevention, Platform security, and aggregated analytics is carried out on the basis of tf77's legitimate interests in maintaining a safe, secure, and functional Platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Processing for marketing communications is carried out only where you have given explicit, informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. tf77 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, maintain your session, remember your preferences, and collect analytical data about Platform usage.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. They enable session management, login persistence, and security features. These cookies cannot be disabled without disrupting the Platform's operation.
• Analytical Cookies: Used to collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur. This data helps tf77 improve the Platform experience.
• Functional Cookies: Used to remember your preferences, such as your preferred language (English) or display settings, so that these do not need to be re-entered on each visit.
• Marketing Cookies: Used only where you have consented, to deliver promotional content relevant to your Platform activity and gaming preferences.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the tf77 Platform. Most modern browsers allow you to refuse all cookies or to receive a notification before a cookie is placed. Consult your browser's help documentation for instructions specific to your browser.

7 Third-Party Sharing & Disclosure

tf77 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share transaction data with our approved payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) solely for the purpose of processing your deposits and withdrawals in BDT. These partners are bound by their own privacy and security standards.
• Game Providers: Game session data is shared with our third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary to deliver game results and enforce game rules. No personally identifiable information beyond a session token is typically shared.
• Identity Verification Services: KYC documents may be shared with third-party identity verification providers for the purpose of verifying your identity and age. These providers are contractually obligated to process your data only for the stated purpose and to maintain appropriate security standards.
• Fraud Prevention and Security: We may share data with fraud detection services and cybersecurity partners to identify and prevent fraudulent activity on the Platform.
• Legal and Regulatory Disclosure: tf77 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or to protect the rights, property, or safety of tf77, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of tf77's business, personal data may be transferred to the acquiring entity, subject to the acquiring entity agreeing to uphold the privacy protections described in this Policy.

8 International Data Transfers

The tf77 Platform primarily serves players based in Bangladesh, and we endeavour to process and store personal data within secure data centres that meet internationally recognised security standards. However, some of our third-party service providers — including certain game studios and technical infrastructure partners — may be located outside Bangladesh.

Where personal data is transferred internationally, tf77 takes reasonable steps to ensure that the receiving party provides an adequate level of data protection. This may include requiring contractual data protection clauses, conducting due diligence on the recipient's security practices, and limiting the scope of data transferred to only what is strictly necessary.

By using the tf77 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section, subject to the safeguards described above.

9 Data Retention

tf77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required or permitted by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active tf77 account is retained for the full duration of the account's active period.
• Post-Closure Retention: Following account closure — whether voluntary or by tf77 — personal data (including KYC documents, transaction records, and gameplay history) is retained for a defined period as required to satisfy anti-money laundering record-keeping obligations and to handle any residual disputes or legal claims.
• Marketing Data: Personal data processed on the basis of your consent for marketing purposes is retained only until you withdraw your consent, at which point it will be promptly removed from our marketing databases.
• Support Communications: Records of customer support interactions are retained for a reasonable period to enable dispute resolution and quality assurance.
• Technical Logs: Server logs and technical data collected for security and fraud prevention purposes are retained for a defined period consistent with their operational purpose, after which they are deleted or anonymised.

When personal data is no longer required, tf77 will securely delete, destroy, or anonymise it in accordance with industry best practices.

10 Your Data Rights

As a player on the tf77 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact tf77's support team using the details in Section 14. We will respond to all valid requests within a reasonable timeframe and at no cost to you, unless a request is manifestly unfounded or excessive.

• Right of Access: You have the right to request a copy of the personal data tf77 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request that tf77 corrects any personal data about you that is inaccurate, incomplete, or out of date.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where tf77 is required by law to retain data (for example, for AML record-keeping purposes).
• Right to Restriction: You may request that tf77 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where technically feasible and legally applicable, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Children & Minors

The tf77 Platform is strictly prohibited for use by individuals under the age of 21. tf77 does not knowingly collect, solicit, or process personal data from individuals under the age of 21. If tf77 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be securely deleted (subject to any legal retention requirements), and any funds in that account will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor under your care has registered an account on tf77, please contact us immediately at [email protected] so that we can take prompt remedial action. We take the protection of minors extremely seriously and have implemented multiple age-verification controls to prevent underage access to the Platform.

12 Security Measures

tf77 implements a comprehensive set of technical and organisational security measures to protect the personal data it processes against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the tf77 Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Password Hashing: Account passwords are never stored in plain text. They are processed using strong cryptographic hashing algorithms, meaning that even tf77's internal systems cannot retrieve your original password.
• Access Controls: Access to personal data within tf77's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories are permitted to access them.
• Intrusion Detection and Monitoring: tf77's infrastructure is monitored continuously for suspicious activity, and automated intrusion detection systems are in place to identify and respond to potential security incidents in real time.
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a data breach that poses a risk to your personal data, tf77 will take prompt remedial action and notify affected players in accordance with applicable legal requirements.

While tf77 takes all reasonable precautions to protect your personal data, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your tf77 account and to notify tf77 immediately if you suspect any unauthorised access.

13 Updates to This Privacy Policy

tf77 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made to this Policy, we will notify registered players via email or through a prominent notice on the Platform, with reasonable advance notice of the changes taking effect.

The "Last Updated" date displayed at the top of this Policy will be revised whenever changes are made. We encourage you to review this Policy periodically to remain informed of how tf77 protects your personal data. Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms.

If you do not agree with any changes to this Policy, please discontinue use of the Platform and contact our support team to request account closure in accordance with the procedures described in the tf77 Terms & Conditions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data tf77 holds about you, please contact our support and privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request" or "Data Rights" in the subject line of your email to ensure prompt routing to the appropriate team.
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: tf77 aims to respond to all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6)
• Language: Privacy enquiries are handled in English

When submitting a data rights request, please include your registered username and a clear description of your request so that our team can locate your account and respond accurately. Do not include your password in any communication sent to tf77 support.