cm77 Privacy Policy — How We Handle Your Personal Data

cm77 is committed to processing personal data responsibly, transparently, and in strict accordance with applicable data protection standards. We collect only the minimum data necessary to deliver a safe, fair, and enjoyable gambling experience for players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This document sets out our practices in full so that you can make informed decisions about your information at every stage of your relationship with cm77.

1 Data We Collect

cm77 collects personal data through several channels: directly from you during registration and account management; automatically through your device and browser as you interact with the platform; and, in limited circumstances, from trusted third-party partners involved in payment processing, identity verification, and fraud prevention.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, Bangladesh mobile phone number, and preferred currency (BDT).
• Identity verification (KYC) documents: National Identity Card (NID) number and scan, passport or driving licence, and in some cases a selfie photograph or video for biometric verification.
• Payment information: Mobile money account identifiers (bKash, Nagad, Rocket, Upay wallet numbers), bank account details for bank-transfer withdrawals, and Visa or Mastercard card numbers (stored in tokenised form only — raw card numbers are never retained by cm77).
• Communications content: Messages, attachments, and chat transcripts submitted through the cm77 live chat support system or via email to [email protected].
• Responsible gaming declarations: Self-assessment responses, deposit limit preferences, cooling-off period requests, and self-exclusion applications submitted through the cm77 Account Settings dashboard.

Information collected automatically:

• Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and time zone settings (Bangladesh Standard Time, UTC+6, is the platform default).
• Usage and behavioural data: Pages visited on cm77.bio, session duration, game titles launched, bet amounts, wagering history, deposit and withdrawal timestamps, and navigation path through the platform.
• Cookie and tracker data: Session cookies, preference cookies, analytics cookies, and fraud-detection fingerprinting data (described in full in Section 4).

2 How We Use Your Data

cm77 processes your personal data only for the purposes set out below. We do not process personal data for any purpose that is incompatible with the original reason for which it was collected without first obtaining your explicit consent.

• Account management and platform access: To create, maintain, and secure your cm77 player account, authenticate your identity at login, process password reset requests, and manage two-factor authentication (OTP) delivery to your registered mobile number.
• Payment processing: To facilitate bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank-transfer deposits and withdrawals, verify that payment accounts belong to you, and prevent duplicate or fraudulent transactions.
• Identity verification and regulatory compliance: To complete Know Your Customer (KYC) checks, verify that you meet the minimum age requirement of 18 years, screen against financial crime databases, and satisfy applicable anti-money-laundering (AML) obligations.
• Game delivery and platform personalisation: To provide access to the full cm77 game catalogue — including cricket betting, live casino, slots, Poker, and Callbreak Quick — and to personalise the game lobby display based on your previous activity and preferences.
• Bonus and promotional management: To determine your eligibility for welcome bonuses, reload offers, BPL and IPL season promotions, and cashback programmes; to track wagering requirement progress; and to enforce bonus terms fairly across all players.
• Responsible gaming and player protection: To monitor betting patterns that may indicate problem gambling behaviour, enforce self-imposed deposit limits and cooling-off periods, and act on self-exclusion requests submitted through the Account Settings dashboard.
• Fraud detection and platform security: To identify and prevent account takeover attempts, detect collusion in multiplayer card games, flag suspicious deposit or withdrawal patterns, and protect the integrity of game outcomes.
• Customer support: To respond to your enquiries, complaints, and dispute submissions submitted via live chat or email, and to maintain a record of support interactions for quality and compliance purposes.
• Marketing communications: To send you promotional emails and SMS messages about new games, seasonal bonus offers (Eid, Pohela Boishakh, Victory Day, T20 season), and platform updates — only where you have provided explicit opt-in consent. You may withdraw this consent at any time through your Account Settings or by contacting live chat support.
• Analytics and platform improvement: To analyse aggregate usage patterns, identify technical issues, measure page performance, and make data-driven improvements to the cm77 user experience.

3 Data Sharing & Third Parties

cm77 shares personal data with third parties only where strictly necessary, under contractual obligations that require those parties to maintain equivalent data protection standards, and only for the specific purposes listed below. We never share data with third parties for purposes beyond those described in this Privacy Policy.

Categories of third parties who may receive your data:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum data necessary (name, account identifier, transaction amount) to process your deposit or withdrawal instruction.
• Identity verification partners: Specialist KYC and biometric verification providers receive your identity document scans and, where applicable, facial image data solely for the purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers integrated into the cm77 platform may receive a pseudonymous player identifier and session token to deliver game content and resolve game disputes. They do not receive your full name, NID, or financial data.
• Fraud prevention and cybersecurity partners: Specialist fraud detection platforms receive device fingerprint data, IP addresses, and behavioural analytics to identify and block fraudulent activity on the cm77 platform.
• Legal and regulatory authorities: cm77 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or legitimate regulatory request. cm77 will notify you of any such disclosure unless legally prohibited from doing so.
• Technology and infrastructure providers: Cloud hosting, content delivery, database management, and cybersecurity infrastructure providers who process data exclusively on cm77's behalf under strict data processing agreements.

4 Cookies & Tracking Technologies

cm77.bio uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in during your session, to remember your language and display preferences, and to gather anonymised analytics that help us improve the site. Below is a transparent breakdown of the cookies we use and their purpose.

cm77 does not use third-party advertising cookies or retargeting pixels on cm77.bio. We do not allow external advertising networks to set cookies on your device through our platform. You may manage preference and analytics cookies at any time through the Cookie Preferences section of your Account Settings dashboard. Please note that disabling strictly necessary or security cookies may impair your ability to log in and use the platform.

5 Data Retention

cm77 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, to comply with applicable legal and regulatory retention obligations, or to resolve disputes and enforce our agreements. The following retention periods apply:

• Active account data: Retained for the full duration of your active relationship with cm77 (i.e., while your account remains open and in use) plus a further period after account closure as required by applicable law.
• KYC and identity verification records: Retained for a minimum of five (5) years following account closure, in accordance with applicable anti-money-laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction or wager, for financial audit, tax, and AML compliance purposes.
• Customer support communications: Retained for up to three (3) years from the date of the support interaction, or longer where the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of the consent period plus two (2) years, to demonstrate that marketing was sent with valid consent and to handle any subsequent objections or complaints.
• Anonymised analytics data: May be retained indefinitely in aggregated, anonymised form that cannot be used to identify any individual player.

When your personal data is no longer required for any of the purposes above, cm77 will securely delete or irreversibly anonymise it. Secure deletion means the data is overwritten or destroyed in a manner that makes recovery impossible. We review retention schedules annually to ensure they remain consistent with operational need and legal obligation.

6 Your Privacy Rights

cm77 recognises and respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting the cm77 privacy support team via live chat or by emailing [email protected]. We will respond to all valid requests within a reasonable timeframe, and in any event within 30 calendar days of receipt.

• Right of access: You have the right to request a copy of all personal data that cm77 holds about you, together with information about how it is being processed, the purposes for which it is used, and the categories of third parties with whom it has been shared.
• Right to rectification: If any of the personal data cm77 holds about you is inaccurate, incomplete, or out of date, you have the right to request that it be corrected without undue delay. Updates to contact details and preferences can also be made directly through your Account Settings dashboard.
• Right to erasure ("right to be forgotten"): You may request that cm77 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis for processing exists), or where the data has been processed unlawfully. Please note that this right is subject to legal retention obligations — cm77 cannot delete KYC or transaction records that we are legally required to retain.
• Right to restrict processing: You have the right to ask cm77 to restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and a determination of whether cm77's legitimate interests override your rights is pending.
• Right to data portability: Where cm77 processes your data on the basis of your consent or to perform a contract with you, and that processing is carried out by automated means, you have the right to receive a structured, commonly-used, and machine-readable copy of the data you provided to cm77.
• Right to object to marketing: You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. You can withdraw marketing consent via Account Settings or by contacting our live chat support team. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to your objection.
• Right to withdraw consent: Where cm77 relies on your consent as the legal basis for any specific data processing activity, you may withdraw that consent at any time. Withdrawal of consent will not affect any processing carried out before the withdrawal.

7 Data Security Measures

cm77 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme is reviewed and updated on a regular basis to reflect evolving threats and industry best practices.

• SSL/TLS encryption in transit: All data exchanged between your device and cm77.bio is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser address bar when accessing any page on cm77.bio.
• Encryption at rest: Sensitive personal data — including KYC document files, financial identifiers, and password hashes — is encrypted at rest using industry-standard symmetric encryption. Raw passwords are never stored; only salted cryptographic hashes are retained.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. cm77 staff members can only access the minimum player data required to perform their specific role. All internal data access events are logged and subject to regular audit.
• Two-factor authentication (2FA): OTP-based 2FA is enforced for all account login events and sensitive operations including password resets and withdrawal requests above defined thresholds, protecting your account even if your password is compromised.
• Fraud detection systems: Automated fraud detection engines monitor account activity in real time to identify and block suspicious login attempts, unusual betting patterns, and coordinated multi-account behaviour.
• Regular security assessments: The cm77 platform undergoes periodic security assessments including vulnerability scanning and penetration testing to identify and remediate potential weaknesses before they can be exploited.
• Data breach response: In the unlikely event of a personal data breach that is likely to result in risk to your rights and freedoms, cm77 will notify affected players without undue delay and provide full details of the nature of the breach, the data involved, and the steps cm77 is taking to address it.

8 Contact & Privacy Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cm77 processes your personal data, please contact the cm77 privacy support team using any of the following channels:

• Live Chat: Available 24/7 on cm77.bio — our fastest response channel for privacy enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line to ensure your message reaches the correct team.

When submitting a privacy request, please provide your registered email address, a description of your request or concern, and (where relevant) your cm77 username so that we can locate your account records efficiently. We will acknowledge receipt of your request promptly and aim to provide a full response within 30 calendar days.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your concern to the relevant data protection authority or regulatory body in your jurisdiction. cm77 will cooperate fully with any legitimate regulatory enquiry and provide all information reasonably requested in connection with such an investigation.

cm77 reserves the right to update this Privacy Policy at any time. When material changes are made, we will revise the "Last Updated" date at the top of this page and, where the changes are significant, notify active players directly via their registered email address. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.