tf77 Privacy Policy

This Privacy Policy ("Policy") describes how tf77 ("we", "us", "our", "the Company") collects, uses, stores, shares and protects the personal data of individuals who access or use the tf77 website at tf77.ws and all associated gaming, betting and account management services (collectively, the "Platform"). This Policy applies to all users of the Platform, including registered players, prospective players who visit the site without registering, and any individual whose personal data is processed by tf77 in connection with the Platform. By accessing the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you should not use the Platform.

tf77 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. We collect only the data we genuinely need to operate the Platform and deliver services to our players. We do not sell personal data to third parties. We do not use personal data for purposes incompatible with those stated in this Policy. We maintain appropriate technical and organisational measures to keep your data secure throughout its lifecycle on our systems.

tf77 collects personal data in the following categories. In each case, we collect only what is necessary for the purpose described:

• Registration data: your full name, date of birth, mobile phone number, and the password you create when opening a tf77 account. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.
• Identity verification data: copies of government-issued identity documents (national ID card or passport) and, where requested, proof of address or source of funds documents. These are collected when tf77 is required to carry out enhanced due diligence checks under applicable anti-money-laundering obligations.
• Payment and transaction data: the mobile financial service account numbers (bKash, Nagad, Rocket or Upay) you use to deposit and withdraw, transaction reference numbers, deposit amounts, withdrawal amounts, and transaction timestamps. This data is necessary to process and reconcile financial transactions and to detect fraudulent activity.
• Gameplay and betting data: records of all bets placed, games played, betting markets accessed, stake amounts, outcomes and any bonus credit applied or wagering requirement progress. This data is necessary for bet settlement, bonus management, responsible gaming monitoring, and fraud detection.
• Device and technical data: IP address, device type, operating system, browser type and version, session duration, pages visited, and click-path data. This data is collected automatically when you access the Platform and is used for security monitoring, fraud prevention, and Platform performance optimisation.

tf77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. Where identity documents are submitted for verification purposes, they are processed only to confirm identity and age and are not retained beyond the period required for compliance purposes.

tf77 uses the personal data we collect for the following purposes. In each case we rely on a lawful basis for processing, as described in Section 3:

• Account creation and management: to open, maintain, and administer your tf77 account, to process your login and authentication, and to communicate with you regarding your account status, security alerts and service updates.
• Identity and age verification: to confirm that you are at least 21 years of age and that you are who you claim to be, in compliance with tf77's responsible gaming obligations and applicable anti-money-laundering requirements.
• Transaction processing: to process deposits, credit your account, process withdrawal requests, and maintain an accurate ledger of all financial transactions associated with your account. Payment data is shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay) only to the extent necessary to complete each transaction.
• Fraud prevention and security: to monitor Platform activity for patterns consistent with fraud, money laundering, bonus abuse, multiple account operation, or use of automated software. Where suspicious activity is identified, we may flag the account for review, suspend access, or report to relevant authorities as required.
• Responsible gaming: to monitor gameplay data for indicators of problem gambling behaviour, such as rapidly increasing bet sizes, unusually long session durations, or repeated self-exclusion requests. This monitoring is carried out in the interest of player welfare and is not used to target vulnerable players with promotions.
• Customer support: to respond to your enquiries, complaints and support requests. Support communications are retained for a reasonable period to maintain a record of interactions and to improve service quality.

Platform improvement: to analyse aggregated, anonymised usage data to identify technical issues, improve Platform performance, and develop new features. Individual player profiles are not used for this purpose — only anonymised aggregate data.

tf77 processes personal data only where a lawful basis exists. The bases we rely on are:

• Contractual necessity: processing required to fulfil our contractual obligations to you as a registered Platform user — including account administration, bet settlement, and payment processing. Without this processing, we cannot provide Platform services.
• Legal obligation: processing required to comply with applicable law, including anti-money-laundering obligations, age verification requirements, fraud reporting obligations, and any lawful request from a competent authority or court.
• Legitimate interests: processing carried out for tf77's legitimate business interests, including fraud prevention, Platform security monitoring, responsible gaming monitoring, and customer support quality improvement — provided these interests are not overridden by your rights and interests.
• Consent: where tf77 sends you optional marketing communications (such as promotional offers or bonus notifications), we rely on your consent. You may withdraw consent at any time by contacting support at [email protected].

tf77 does not sell, rent or trade personal data. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: we share the minimum payment data necessary with bKash, Nagad, Rocket and Upay to process deposits and withdrawals. These providers process data only as necessary to complete the transaction and are bound by their own privacy obligations.
• Identity verification providers: where third-party identity verification or age verification services are used to process KYC documentation, personal data is shared with those providers solely for verification purposes and under strict data processing agreements.
• Law enforcement and regulatory authorities: where tf77 is legally required to disclose personal data to a competent authority — for example, in response to a court order, a law enforcement request, or a regulatory investigation — we will comply with that requirement. We will notify you of such a disclosure where we are legally permitted to do so.
• Business transfers: in the event of a merger, acquisition or sale of all or part of tf77's business, personal data held by tf77 may be transferred to the acquiring entity as part of that transaction. In such cases, the acquiring entity would be bound by the terms of this Policy or a policy that provides equivalent or greater protection.

tf77 does not share personal data with advertising networks, marketing data aggregators, social media platforms for targeting purposes, or any entity that would use the data in a way inconsistent with this Policy.

All financial transactions on the tf77 Platform are conducted in Bangladeshi Taka (৳) via bKash, Nagad, Rocket and Upay. tf77 does not store your full mobile financial service PIN or password at any point. Payment data is transmitted via encrypted connections directly to the relevant payment provider. tf77 retains transaction records (amounts, timestamps, reference numbers and the last few digits of the mobile wallet number used) for the purpose of reconciliation, dispute resolution, and compliance with applicable financial record-keeping obligations.

Where a Player's account is subject to a withdrawal review or fraud investigation, tf77 may temporarily retain a higher level of transaction detail for the duration of the investigation. Any such additional data is securely stored, accessed only by authorised personnel on a need-to-know basis, and deleted once the investigation is concluded and the standard retention schedule applies.

tf77 uses cookies and similar tracking technologies on the Platform to support core functionality, maintain session state, and analyse Platform performance. We use the following categories of cookies:

• Strictly necessary cookies: these are essential for the Platform to function. They manage your login session, keep you authenticated while you navigate between pages, and maintain your account's security state. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: these remember your preferences such as language selection and remember you across visits so you do not have to log in from scratch on each new session. These are not used to track you across third-party websites.
• Analytics cookies: these collect anonymised data about how players use the Platform — which pages are visited most frequently, where users drop off, and how different features perform. This data is used solely to improve the Platform and is not linked to individual player profiles.
• Security cookies: these help tf77 detect and prevent fraudulent activity, bot access, and suspicious login patterns. They work alongside our server-side security systems and are essential for maintaining the integrity of the Platform.

tf77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. If you wish to manage your cookie preferences, you can do so through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.

tf77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any applicable legal minimum retention periods. The following retention schedules apply: account data and transaction records are retained for the duration of the account's active life plus a post-closure period of at least 5 years, in compliance with applicable financial record-keeping and anti-money-laundering obligations; identity verification documents are retained for the same post-closure period; gameplay and betting records are retained for a minimum of 5 years post-closure; device and technical data is retained for a maximum of 13 months from collection; support communications are retained for 3 years from the date of the last interaction.

When personal data is no longer required and the applicable retention period has expired, tf77 securely deletes or anonymises the data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and Platform improvement purposes. Upon request for account closure, tf77 will begin the deletion process within 30 days, subject to the retention obligations described above.

tf77 implements technical and organisational security measures proportionate to the risks associated with the personal data we process. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform, ensuring that your credentials and payment information cannot be intercepted in transit.
• Encryption at rest for stored personal data, including identity documents and financial records, using industry-standard encryption protocols.
• Access controls that restrict access to personal data on a strict need-to-know basis. Only authorised personnel with a legitimate operational need may access identifiable player data. All access is logged and subject to audit.
• Regular security reviews and testing of Platform systems and infrastructure, including vulnerability assessments, to identify and address potential security weaknesses before they can be exploited.

Despite these measures, no security system is impenetrable. In the event of a data security incident that is likely to result in a high risk to the rights and freedoms of affected players, tf77 will notify those players without undue delay and will take all reasonable steps to mitigate the impact of the incident.

As a tf77 player whose personal data we process, you have the following rights. To exercise any of these rights, please contact tf77 at [email protected] with your full name, registered mobile number, and a description of your request:

• Right of access: you have the right to request a copy of the personal data tf77 holds about you. We will provide this within 30 days of receiving a valid request, free of charge for the first request in any 12-month period.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will action such requests promptly.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent on which processing is based. This right is subject to legal retention obligations — tf77 cannot delete data it is required by law to retain.
• Right to restriction of processing: you have the right to request that tf77 restricts the processing of your personal data in certain circumstances, for example while a dispute regarding accuracy is being resolved.
• Right to object: you have the right to object to tf77 processing your personal data on the basis of legitimate interests. You also have the right to opt out of marketing communications at any time, at no cost and without giving a reason.

tf77 will respond to all data rights requests within 30 days. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling data rights requests except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The tf77 Platform is strictly for adults aged 21 and above. tf77 does not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has registered on the Platform or has provided personal data to tf77, please contact us immediately at [email protected]. Upon receiving such a notification, tf77 will promptly investigate, suspend the account pending review, and delete any personal data confirmed to have been provided by an underage individual.

The tf77 Platform may contain references to third-party payment providers (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, Spribe and others). While tf77 takes care to work with reputable partners, we are not responsible for the privacy practices of third-party services. Each third-party provider operates under its own privacy policy. When you interact directly with a third-party service — for example, when authenticating a bKash payment through the bKash app — you are subject to that provider's own terms and privacy policy. tf77 encourages all players to review the privacy policies of any third-party services they use in connection with the Platform.

tf77 reserves the right to update or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — tf77 will notify registered players by posting a prominent notice on the Platform homepage or by sending a notification to the mobile number associated with your account. Non-material changes (such as formatting corrections or clarifications that do not alter the substance of any provision) may be made without individual notification.

The current version of this Policy is always available at tf77.ws/privacy-policy. The date at the top of the page indicates when the Policy was last revised. By continuing to use the Platform after a revised Policy has been published, you accept the revised terms. If you do not accept the changes, you should stop using the Platform and request account closure by contacting [email protected].