pu77 Privacy Policy

pu77 is Bangladesh's trusted online casino and sports betting platform, offering cricket betting, live casino games, slots, and a wide range of instant-win products to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond. As a platform that handles real-money transactions and personal account data, we take the protection of your privacy with the utmost seriousness.

This Policy has been prepared to give you a clear, honest, and comprehensive account of our data practices. We have written it in plain English — avoiding unnecessary legal jargon — because we believe you deserve to understand exactly how your information is handled, not just that it is handled "in accordance with applicable laws".

Throughout this Policy, "personal data" means any information that identifies you as an individual, or that could be used in combination with other data to identify you. This includes obvious identifiers like your name and email address, as well as less obvious ones like your device ID, IP address, and gameplay patterns.

This Policy applies to all data collected through the pu77 website at pu77.io, our customer support communications, and any other digital touchpoints operated by pu77. It does not apply to third-party websites or services that may be referenced or linked from our platform — those services have their own privacy policies which we encourage you to review independently.

pu77 collects the following categories of personal data from players and site visitors. We only collect data that is necessary, relevant, and proportionate to the purposes described in this Policy:

pu77 collects personal data through the following primary channels:

• Account Registration: When you create a pu77 Account, you provide identity data, contact data, and set your account credentials. This information is collected directly and forms the core of your player profile.
• Deposits and Withdrawals: When you conduct financial transactions on the platform — including deposits via bKash, Nagad, Rocket, or Upay, and withdrawal requests — payment data is collected and retained as part of our financial records and anti-money-laundering obligations.
• KYC Verification: When you submit identity documents for account verification, pu77 collects copies of those documents and extracts relevant verification data including your name, date of birth, and address.
• Gameplay Activity: Your betting and gaming behaviour on the pu77 platform is automatically recorded, including game type, stake amounts, session timing, and outcome data. This data is used for account management, responsible gaming monitoring, and fraud prevention.
• Customer Support Interactions: When you contact pu77 via Live Chat, email, or WhatsApp, the content of that communication — including any personal data you share — is recorded and associated with your account record.
• Cookies and Tracking Technologies: pu77 uses cookies, web beacons, and similar tracking technologies to collect technical and usage data automatically as you browse the platform. See Section 7 for full details of our cookie practices.
• Third-Party Verification Services: In some cases, pu77 may receive identity or fraud-check data from third-party KYC and AML screening services that cross-reference the information you provide against external databases.

pu77 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first seeking your explicit consent:

• Account Management: To create, maintain, and manage your pu77 Account, including processing your registration, verifying your identity, managing your preferences, and providing access to all platform features.
• Transaction Processing: To process deposits, credit winnings, and execute withdrawal requests in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card).
• Identity and Age Verification: To confirm that you meet pu77's minimum age requirement of 21 years and to verify your identity in compliance with our Know Your Customer obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited behaviours as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to enforce responsible gaming limits, time-outs, and self-exclusions as requested by Players or mandated by our responsible gaming policy.
• Customer Support: To respond to your support enquiries, resolve complaints, and communicate with you about account-related matters via Live Chat, email, or WhatsApp.
• Platform Improvement: To analyse usage patterns and technical data in order to improve the design, functionality, and performance of the pu77 platform, fix bugs, and develop new features.
• Personalisation: To tailor your experience on the pu77 platform, including presenting relevant game recommendations, promotional offers, and content based on your preferences and activity history.
• Marketing Communications: To send you promotional emails, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: To fulfil our legal obligations under applicable anti-money-laundering, financial crime prevention, data protection, and gambling-related regulations.

pu77 processes your personal data on the following legal grounds depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the agreement between pu77 and you as a registered Player — including account creation, payment processing, game delivery, and support services.
• Legal Obligation: Processing that pu77 is required to undertake by applicable law, including KYC identity verification, anti-money-laundering record retention, and cooperation with competent authorities.
• Legitimate Interests: Processing carried out for pu77's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not outweighed by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — including sending marketing communications and using non-essential cookies. You may withdraw consent at any time without detriment to your account standing.

pu77 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

• Payment Processors: Your financial data is shared with payment service providers — including bKash, Nagad, Rocket, Upay, and banking partners — solely for the purpose of processing your deposit and withdrawal transactions in BDT. These providers are contractually bound to handle your data securely and are prohibited from using it for any other purpose.
• KYC and AML Screening Partners: pu77 works with regulated third-party identity verification and anti-money-laundering screening services to fulfil its compliance obligations. These providers may cross-reference your identity data against official sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.
• Game Studio Providers: When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others — limited technical data (such as a player session token) is transmitted to the studio's platform to enable game delivery. Game studios do not receive your full identity or payment data.
• IT and Hosting Infrastructure: pu77's platform infrastructure relies on third-party hosting, cloud storage, and cybersecurity service providers. These providers process data on pu77's behalf under strict data processing agreements and are not permitted to access or use your data independently.
• Legal and Regulatory Authorities: pu77 will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent governmental authorities where required by applicable law, court order, or official regulatory demand. We will notify you of such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of pu77's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to how your data is processed as a result.

pu77 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate, secure, and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the operation of the pu77 platform and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure platform stability. No consent is required for these cookies as they are fundamental to service delivery.
• Functional Cookies: These cookies remember your preferences — such as your language setting, preferred payment method, and display preferences — to provide a more personalised experience on repeat visits. Disabling these cookies may affect platform functionality but will not prevent access.
• Analytics Cookies: pu77 uses analytics cookies to collect anonymised data about how users interact with the platform, including which pages are visited most frequently, how long users spend on each section, and which features generate the most engagement. This data is used exclusively for internal platform improvement.
• Responsible Gaming Cookies: These cookies store your responsible gaming preferences — including active deposit limits, session time-out settings, and self-exclusion status — to ensure these controls are consistently enforced across sessions and devices.

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging in to or using the pu77 platform. pu77 does not use cookies to track your activity on third-party websites outside of the pu77 platform.

pu77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or device and the pu77 servers is protected by industry-standard 256-bit SSL/TLS encryption. This ensures that your login credentials, payment information, and personal data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data — including identity documents, payment method details, and account credentials — is encrypted at rest in pu77's secure data storage infrastructure using AES-256 encryption.
• Access Controls: Access to personal data within pu77 is restricted on a strict need-to-know basis. Only personnel with a legitimate operational requirement are granted access, and all access is logged and subject to regular audit.
• Regular Security Assessments: pu77 conducts regular vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their pu77 Accounts for an additional layer of login security. pu77 staff accounts are subject to mandatory 2FA.
• Incident Response: pu77 maintains a documented data breach response procedure. In the event of a security incident that puts your personal data at risk, we will notify affected players and relevant authorities within the timeframes required by applicable law.

pu77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Data associated with an active pu77 Account is retained for the full duration of the account's active status, plus a minimum of 5 years following permanent account closure.
• Transaction Records: Financial transaction records — including deposit and withdrawal histories in BDT — are retained for a minimum of 7 years from the date of the transaction in compliance with anti-money-laundering recordkeeping obligations.
• KYC Verification Documents: Identity verification documents submitted for KYC purposes are retained for a minimum of 5 years following account closure, or longer where required by applicable law or where an investigation is ongoing.
• Support Communications: Customer support interaction records — including Live Chat transcripts, email threads, and complaint logs — are retained for a period of 3 years from the date of the most recent interaction.
• Analytics and Usage Data: Anonymised analytics and usage data is retained indefinitely in aggregated form, as it no longer constitutes personal data once fully anonymised and cannot be used to identify individual players.
• Inactive Account Data: Accounts with no activity for 12 months are flagged as inactive. Data associated with inactive accounts is retained for the standard post-closure period once the account is formally closed, following the notification process described in our Terms & Conditions.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, pu77 will securely delete or irreversibly anonymise that data in accordance with our internal data lifecycle management procedures.

Depending on the data protection laws applicable in your jurisdiction, you may have some or all of the following rights in relation to the personal data that pu77 holds about you:

• Right of Access: You have the right to request a copy of the personal data that pu77 holds about you, along with information about how that data is used. pu77 will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data that pu77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic contact information directly through your Account settings.
• Right to Erasure: In certain circumstances — including where data is no longer necessary for the purpose it was collected, or where you withdraw consent — you may request that pu77 delete your personal data. This right is subject to applicable legal retention obligations, which may prevent full deletion in some cases.
• Right to Restrict Processing: You may request that pu77 restrict the processing of your personal data while a data accuracy dispute is resolved, or where you object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that pu77 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your fundamental rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact the pu77 support team via Live Chat or email at support at pu77.io. We may need to verify your identity before processing your request. pu77 will respond to all data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, with prior notification.

The pu77 platform is strictly intended for adults aged 21 years and above. pu77 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register for a pu77 Account or use any real-money feature of the platform.

pu77 enforces age verification at every stage of the account lifecycle — including during registration, before processing the first withdrawal, and during periodic account reviews. Where pu77 has reason to believe that a registered Account is held by an individual under the age of 21, that Account will be suspended immediately, all pending transactions will be cancelled, and any deposited funds will be returned to the source payment method following verification.

The pu77 platform serves players primarily in Bangladesh, and we endeavour to store and process personal data within or as close to the Bangladesh region as our infrastructure permits. However, some of the third-party service providers that pu77 relies upon — including KYC verification partners, cloud infrastructure providers, and game studio platforms — may process data in countries outside Bangladesh.

Where personal data is transferred internationally, pu77 takes all reasonable steps to ensure that the recipient applies data protection standards that are equivalent to those we apply ourselves. This may include contractual data protection clauses, vendor assessments, and technical safeguards applied at the point of transfer.

By using the pu77 platform and submitting your personal data, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh for the limited purposes described in this Policy.

The pu77 platform integrates third-party services to deliver its full product offering. While pu77 carefully vets all third-party partners, please be aware that these services operate under their own privacy policies, which govern how they handle any data they receive:

• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive limited session data to render games within the pu77 platform. Their data practices are governed by their own privacy frameworks, which pu77 reviews as part of its vendor onboarding process.
• Payment Service Providers: bKash, Nagad, Rocket, Upay, and banking partners process payment transaction data independently in accordance with Bangladesh Bank regulations and their own privacy obligations. pu77 does not retain full payment instrument numbers — only tokenised references used to match transactions to accounts.
• Analytics Providers: pu77 may use third-party analytics tools to analyse aggregated, anonymised platform usage data. These tools do not receive personally identifiable information and are configured to respect user privacy settings including cookie opt-outs.
• Customer Support Platforms: Live Chat and support ticketing infrastructure may be provided by a third-party customer service platform. Support interaction data is processed on pu77's behalf under a binding data processing agreement, and the provider is prohibited from using support data for its own commercial purposes.

pu77 is not responsible for the privacy practices of third-party services that operate independently of our platform. We encourage you to review the privacy policies of any third-party service you interact with directly, including your chosen payment provider (e.g., bKash or Nagad).

pu77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable laws and regulations, or the features and services available on the platform. We will always publish the current version of this Policy at pu77.io/privacy-policy, with the effective date clearly stated at the top of the document.

When we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to the address registered on your pu77 Account, and/or by displaying a prominent notice on the platform when you next log in. We recommend reviewing this page periodically so you remain informed of our current privacy practices.

Your continued use of the pu77 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and contact our support team to arrange account closure and return of any real-money balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pu77 handles your personal data, please contact our dedicated support team through any of the following channels:

• Email: support at pu77.io (displayed as plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the pu77 platform
• WhatsApp Support: Available daily from 9 AM to 11 PM BST (UTC+6)
• Response Time: pu77 aims to acknowledge all privacy-related requests within 72 hours and to provide a full response within 30 calendar days of receipt.

For formal data rights requests — including subject access requests, erasure requests, and data portability requests — please include the following in your message: your full name as registered on your pu77 Account, your registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. pu77 may request additional verification information to confirm your identity before processing sensitive data rights requests.