Privacy Policy — How cu77 Protects Your Data

1Introduction

cu77 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of everyone who uses the cu77 website at cu77.bet. This Privacy Policy describes the types of information we collect, the purposes for which we collect and use that information, the limited circumstances in which we may share it, and the measures we take to keep it secure.

This Privacy Policy applies to all users of the cu77 platform, including visitors who browse without registering, registered players, and any other person who interacts with any cu77 service or feature. By using the cu77 platform you acknowledge that you have read and understood this Privacy Policy and that your use of the platform is subject to its terms. This Policy should be read alongside our Terms and Conditions.

2Personal Data We Collect

cu77 collects personal data in several ways: directly from you when you register and use the platform, automatically as you interact with the site, and from third parties such as payment processors where this is necessary to deliver our services. The categories of data we collect include:

3How We Use Your Personal Data

cu77 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent:

• To create and manage your player account, verify your identity through KYC, and ensure that only eligible adults aged 21 and above access real-money gaming services on the platform.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, or bank transfer), reconcile transactions, and investigate and resolve payment disputes or discrepancies.
• To fulfil our responsible gaming obligations, including applying deposit limits and cooling-off periods you have set, processing self-exclusion requests, and monitoring account activity for signs of problem gambling.
• To detect and prevent fraud, money laundering, identity theft, multi-accounting, collusion, bot activity, and other prohibited conduct, and to comply with applicable anti-money laundering (AML) obligations.
• To provide customer support, respond to your enquiries and complaints, and communicate with you about your account, including sending transactional notifications (such as deposit confirmations and withdrawal status updates).
• To improve the cu77 platform, diagnose technical issues, optimise game load performance, and analyse usage patterns to make the platform more relevant and enjoyable for Bangladeshi players.

cu77 does not use your personal data to serve third-party advertising, sell profiling data to data brokers, or engage in any form of automated decision-making that produces legal or similarly significant effects without human review.

4Legal Basis for Processing

cu77 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: processing necessary to deliver the cu77 platform services you have agreed to use, including account management, payment processing, and service delivery.
• Legal obligation: processing required to comply with applicable AML regulations, KYC requirements, record-keeping obligations, and any other legal duties to which cu77 is subject.
• Legitimate interests: processing carried out in cu77's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data rights.
• Consent: where cu77 relies on your consent to process personal data (for example, for optional marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5Data Sharing and Disclosure

cu77 does not sell player data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: we share payment-related data with bKash, Nagad, Rocket, and other supported payment providers solely to process your deposits and withdrawals. Data shared is limited to what each processor requires to complete your transaction.
• Identity verification partners: we use third-party KYC service providers to verify the identity documents you submit. These providers receive only the data required to perform the verification check and are contractually prohibited from using it for any other purpose.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or legal process. We will notify you of such disclosure where we are legally permitted to do so.
• Technology and infrastructure partners: our platform hosting and analytics infrastructure is provided by third-party technology vendors. These vendors process data on our behalf under strict data processing agreements and are not permitted to use player data for their own purposes.

6Cookies and Tracking Technologies

cu77 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and improve performance. The cookies we use fall into the following categories:

• Strictly necessary cookies: required for the platform to function. These include session authentication tokens, security tokens, and fraud detection signals. You cannot opt out of these cookies without ceasing to use the platform.
• Performance and analytics cookies: used to understand how players use the platform — which pages are visited, how long sessions last, and where players experience errors. This data is aggregated and does not identify individual players.
• Functional cookies: used to remember your preferences (such as your last viewed game category or language preference) to personalise your experience when you return to the platform.

Most browsers allow you to control cookie settings through their privacy or settings menu. Disabling certain cookies may affect the functionality of the cu77 platform. cu77 does not use third-party advertising cookies and does not allow third-party ad networks to place cookies on cu77 pages.

7Data Security

cu77 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive data at rest, access controls limiting employee access to personal data on a strict need-to-know basis, and regular security assessments of our platform infrastructure.

cu77 limits access to personal data to employees and contractors who have a legitimate business need to process it. All personnel with access to personal data are subject to confidentiality obligations. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cu77 will notify affected players without undue delay.

8Data Retention

cu77 retains personal data for as long as your account remains active and for a period after account closure as required by applicable law and regulation. Financial transaction records and KYC documentation are retained for a minimum of five years following account closure to satisfy AML record-keeping obligations. Gaming activity logs are retained for a minimum of three years.

Once the applicable retention period has expired, cu77 will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for analytical purposes without restriction.

9Your Data Rights

As a user of the cu77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team. cu77 will respond to all valid requests within a reasonable timeframe and at no charge:

cu77 may need to verify your identity before actioning a data rights request. In some circumstances cu77 may be unable to fulfil a request — for example, where deletion of data would conflict with a legal retention obligation. In such cases cu77 will explain the reason for the refusal.

10Children and Minors

The cu77 platform is strictly for adults aged 21 and above. cu77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate verification having been completed, we will delete that data and close the associated account immediately.

11Third-Party Links and Services

The cu77 platform may reference third-party payment services (such as bKash, Nagad, and Rocket) and game content providers. These third parties operate under their own privacy policies, which are independent of this Privacy Policy. cu77 is not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policy of any third-party service before providing personal data to it.

12Changes to This Privacy Policy

cu77 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated "Last Updated" date. Where a change is significant, cu77 may notify registered players via platform notification or email.

Your continued use of the cu77 platform following any update to this Policy constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the platform and may request account closure by contacting our support team.

13Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cu77 handles your personal data, please contact our support team. We are available 24/7 via live chat on the cu77 platform. You may also reach us by email — the address below is plain text only, not a clickable link.