ctd77 Privacy Policy

1. Introduction

ctd77 is committed to protecting the personal information of every player who registers and uses our online casino and sports betting platform. This Privacy Policy sets out the types of personal data we collect, the purposes for which that data is used, how we store and protect it, and the rights you have in relation to your data.

ctd77 operates as a digital-first platform built for the Bangladesh market. We understand that our players entrust us with sensitive personal and financial data, and we take that responsibility seriously. Our data practices are designed to be transparent, proportionate, and secure — we collect only what is necessary, use it only for stated purposes, and protect it with industry-standard security measures.

This Privacy Policy should be read alongside ctd77's Terms & Conditions and Responsible Gaming Policy, all of which collectively govern your use of the platform. This Policy applies to all personal data processed by ctd77 in connection with your use of ctd77.org, regardless of the device or method of access.

2. Information We Collect

ctd77 collects personal data from three main sources: information you provide directly when registering and using the platform, information generated automatically through your use of the platform, and information received from third-party service providers as part of our verification and payment processes.

Information You Provide Directly

When you register an account or interact with ctd77, you may provide us with the following categories of personal data:

• Identity data: full name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact data: mobile phone number, email address, and residential address in Bangladesh.
• Account credentials: username and encrypted password (passwords are never stored in plain text).
• KYC documents: scanned or photographed copies of your Bangladesh National ID (NID), passport, or birth registration certificate as required for identity and age verification.

Information Generated Automatically

When you access and use the ctd77 platform, the following data is automatically generated and recorded:

• Technical data: IP address, device type, operating system, browser type and version, and mobile network information.
• Usage data: pages visited, features used, games played, session duration, deposit and withdrawal history, bet history, and interaction logs.
• Cookie and session data: session tokens and preference cookies stored locally on your device to maintain your logged-in state and platform preferences. See Section 6 for full cookie details.

Information from Third Parties

ctd77 may receive personal data about you from third-party service providers in the following contexts:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): transaction confirmation data including transaction IDs, amounts, and timestamps. ctd77 does not receive or store full card numbers or mobile banking PINs.
• Identity verification partners: confirmation of identity document authenticity and age verification outcomes, where ctd77 uses a third-party KYC service provider.
• Fraud prevention services: risk scoring and flagging data from fraud detection partners, used to protect the platform and its players from unauthorised account access and financial fraud.

4. KYC and Identity Verification

ctd77 operates a mandatory Know Your Customer (KYC) programme as part of its commitment to player safety, age verification, and anti-money laundering compliance. KYC verification is required before full withdrawal access is granted and may be requested at any point during a player's account lifetime.

Documents submitted for KYC are processed as follows:

• Documents are reviewed by ctd77's KYC team (or a contracted third-party KYC service provider) for the sole purpose of verifying your identity and age.
• Document images are stored securely with access-controlled encryption. Access to KYC document files is restricted to authorised personnel only and is logged for audit purposes.
• KYC documents are retained for the period required by applicable anti-money laundering regulations, which is typically a minimum of 5 years from the date of the last transaction on the account.

6. Payment Data and Financial Information

ctd77 treats payment and financial data with the highest level of care. All financial transactions on the platform are denominated in Bangladeshi Taka (৳ / BDT) and are processed through regulated payment channels. ctd77 maintains detailed transaction records for each player account for audit, AML compliance, and dispute resolution purposes.

The following financial data protection principles apply on ctd77:

• ctd77 does not store full debit or credit card numbers. Card payment data is tokenised by the payment processor at the point of entry and ctd77 receives only a masked card reference and transaction confirmation.
• Mobile banking credentials (bKash PIN, Nagad PIN, Rocket PIN) are never entered on ctd77's platform and are never seen or stored by ctd77. Mobile wallet transactions are initiated through the respective wallet's own secure interface.
• Transaction records including deposit amounts, withdrawal amounts, dates, and payment method references are retained for a minimum of 5 years to comply with anti-money laundering record-keeping obligations.

8. Data Security

ctd77 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect personal data against unauthorised access, alteration, disclosure, or destruction.

The key security measures in place at ctd77 include:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and ctd77 servers, preventing interception of data in transit.
• Encrypted storage of sensitive data fields including passwords (hashed and salted using industry-standard algorithms), KYC document files, and financial records.
• Role-based access controls ensuring that ctd77 staff can access only the personal data necessary for their specific role. All staff access to player data is logged and subject to periodic audit.
• Regular security testing including vulnerability assessments and penetration testing of the ctd77 platform infrastructure to identify and remediate security weaknesses before they can be exploited.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a significant risk to player rights, ctd77 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

10. Your Data Rights

As a ctd77 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact ctd77 Customer Support at [email protected] with your full name, registered mobile number, and a description of the right you wish to exercise:

• Right of access: you have the right to request a copy of the personal data ctd77 holds about you. ctd77 will respond to access requests within 30 days.
• Right to rectification: if personal data ctd77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders can update most profile data directly within their account settings.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Note that AML and KYC records are subject to mandatory minimum retention periods that ctd77 cannot override.
• Right to restrict processing: you have the right to request that ctd77 restrict the processing of your personal data in certain circumstances, for example while a complaint about its accuracy is being investigated.
• Right to object: you have the right to object to the processing of your personal data for direct marketing purposes. ctd77 does not engage in third-party direct marketing using player data, but if you receive any ctd77 platform communications you do not wish to receive, you may opt out by contacting [email protected].

ctd77 will respond to all data rights requests within 30 days of receipt of a verified request. Where a request is complex or involves a high volume of data, ctd77 may extend this period by a further 30 days, in which case ctd77 will notify you of the extension and the reason for it within the initial 30-day period.

12. Third-Party Links and Services

The ctd77 platform integrates third-party game content from certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, a session is established with that provider's game server. The game provider's own privacy policy governs the data processed within the game session environment. ctd77 recommends that you review the privacy policies of game providers whose content you use.

ctd77 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose interface you access in connection with using the ctd77 platform. The presence of a third-party service on ctd77 does not constitute an endorsement of that service's data practices.

14. Contact and Data Requests

For any question, concern, or formal request relating to this Privacy Policy or to the personal data ctd77 holds about you, please contact ctd77 Customer Support. Our privacy team reviews all data-related requests and responds within 10 business days for general queries and within 30 days for formal data rights requests.

Email: [email protected]

When contacting us about a data rights request, please include your full name, registered mobile number, and a clear description of the data you are requesting access to, correction of, or deletion of. ctd77 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.