cgt77 Privacy Policy — How We Protect Your Data

Welcome to the cgt77 Privacy Policy. cgt77 operates the online betting and gaming platform accessible at cgt77.io, providing cricket betting, live casino games, slots, and crash games to members in Bangladesh. As an operator that handles personal data on behalf of its members, cgt77 takes its data protection responsibilities extremely seriously.

This Privacy Policy sets out in clear, formal terms the categories of personal data that cgt77 collects from members and visitors in Bangladesh, the purposes for which that data is processed, the legal bases that authorise such processing, the circumstances in which data may be shared with third parties, the measures we employ to keep your data secure, and the rights you hold with respect to your own personal information.

This Privacy Policy applies to all personal data collected through the cgt77 website, any associated mobile interface or application, customer support communications, and any other interaction you have with the cgt77 platform. By registering a cgt77 account or by continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood its contents.

cgt77 collects personal data that is necessary to provide its services, verify member identities, process financial transactions, and comply with applicable legal obligations. The categories of personal data we may collect are described below.

cgt77 collects personal data through the following channels and methods:

3.1 Direct Collection

You provide data directly to cgt77 when you register an account, complete identity verification, make a deposit or withdrawal, place a bet, play a game, contact customer support, respond to a survey or promotion, or update your account profile. This is the primary source of personal data held by cgt77.

3.2 Automated Technical Collection

When you access the cgt77 platform, our systems automatically collect certain technical data including your IP address, device identifiers, browser information, operating system details, and session activity logs. This collection occurs through standard web server logging, session management systems, and analytics tools operated solely for the benefit of the cgt77 platform. See Section 9 for details on cookies and tracking technologies.

3.3 Third-Party Sources

In some circumstances, cgt77 may receive personal data about you from third-party sources, including:

• Payment service providers such as bKash, Nagad, Rocket, and Upay, which provide transaction confirmation data.
• Identity verification and KYC service providers that assist cgt77 in verifying the authenticity of identity documents.
• Fraud prevention and anti-money laundering (AML) screening services that cross-reference member details against watchlists and sanctions databases.
• Banking partners including BRAC Bank, City Bank, Dutch-Bangla Bank, and others, where bank transfer payment methods are used.

cgt77 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and cgt77, including providing betting and gaming services, processing deposits and withdrawals, and maintaining your account.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including identity verification (KYC), anti-money laundering (AML) requirements, and fraud prevention duties.
• Legitimate Interests: Processing is necessary for cgt77's legitimate interests in operating a safe, secure, and commercially viable platform, including fraud detection, security monitoring, platform analytics, and responsible gaming supervision, provided that these interests are not overridden by your own data protection rights.
• Consent: Where processing is not covered by the above grounds, cgt77 will seek your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

cgt77 uses the personal data it collects for the following specific, documented purposes:

5.1 Account and Service Delivery

Your identity and contact data are used to create and manage your cgt77 account, authenticate your identity at login, communicate important account notifications such as deposit confirmations and withdrawal approvals, and deliver the full range of platform services including cricket betting, live casino, slots, and crash games.

5.2 Identity Verification and KYC

cgt77 is required to verify the identity and age of all members. Your identity documents and personal details are used to conduct Know Your Customer (KYC) checks, confirm that you are at least 21 years of age, and verify your residential address in Bangladesh. KYC data may be processed with the assistance of authorised third-party verification service providers.

5.3 Payment Processing

Financial data including your bKash, Nagad, Rocket, Upay, or bank account information is used solely to process deposits and withdrawals on your behalf. cgt77 does not store full payment credentials directly; these are handled through encrypted integrations with the relevant payment service providers.

5.4 Fraud Prevention and Security

Technical data and usage data are analysed to detect and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other platform security threats. Automated monitoring systems flag unusual activity patterns for review by cgt77's compliance and security teams.

5.5 Responsible Gaming

Usage data including betting patterns, session durations, and deposit frequencies are monitored to identify members who may be displaying signs of problem gambling. cgt77 uses this data to enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion, and to proactively reach out to members who may need support.

5.6 Customer Support

Communications data from live chat, email, and support tickets is used to resolve member enquiries, handle disputes, and improve the quality of cgt77's customer service operations. Support communications are retained in accordance with the data retention schedule in Section 7.

5.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse platform performance, understand member preferences, improve game and betting product offerings, and develop new features. This analytics processing does not identify individual members and cannot be used to make decisions that affect your account.

cgt77 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared with external parties only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Payment Service Providers

Relevant financial data is shared with bKash, Nagad, Rocket, Upay, and partner banks including BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, and Sonali Bank solely to process deposit and withdrawal transactions on your behalf. These providers operate under their own privacy policies and are contractually prohibited from using cgt77 member data for any purpose other than payment processing.

6.2 Identity Verification Providers

Your identity documents and personal details may be shared with authorised KYC and AML service providers engaged by cgt77 to verify your identity, confirm your age, and conduct sanctions screening. These providers act as data processors under cgt77's instruction and are bound by strict data processing agreements.

6.3 Technology and Infrastructure Providers

cgt77 uses third-party cloud infrastructure, database hosting, and cybersecurity service providers to operate the platform. These providers may process personal data as part of delivering their services but do so exclusively under cgt77's instruction and subject to appropriate data security obligations.

6.4 Legal and Regulatory Disclosure

cgt77 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or regulatory directive, or where disclosure is necessary to protect the safety, rights, or property of cgt77, its members, or the general public.

cgt77 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to defend against potential legal claims. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or audit requirement, the data will be placed under a legal hold and will not be used for any other purpose during that period.

cgt77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures are reviewed and updated on a regular basis in line with industry best practices.

8.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cgt77 platform is encrypted using 256-bit SSL/TLS protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Data Encryption at Rest: Sensitive personal data including identity documents and financial records stored in cgt77's databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised cgt77 personnel and contractors on a strict need-to-know basis. Multi-factor authentication (MFA) is enforced for all internal system access.
• Intrusion Detection and Monitoring: cgt77's infrastructure is continuously monitored for suspicious access patterns, potential intrusions, and anomalous behaviour using automated security information and event management (SIEM) systems.
• Regular Security Audits: cgt77 conducts periodic internal security reviews and engages independent security specialists to perform penetration testing and vulnerability assessments of its platform infrastructure.

8.2 Organisational Safeguards

All cgt77 employees and contractors who handle personal data are required to complete data protection training and are bound by confidentiality obligations. cgt77 maintains internal data protection policies, incident response procedures, and a data breach notification protocol to ensure that any security incident is identified, contained, and reported in a timely manner.

cgt77 uses cookies and similar tracking technologies on its platform to ensure that the site functions correctly, to remember your session preferences, and to analyse how members interact with the platform. This section explains what cookies we use and why.

9.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to store information about your preferences and session state. Cookies do not contain executable code and cannot be used to install software on your device.

9.2 Types of Cookies Used by cgt77

cgt77 does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on the cgt77 platform. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to log in and use the platform.

As a member of cgt77 in Bangladesh, you hold the following rights with respect to the personal data that cgt77 holds about you. To exercise any of these rights, please contact cgt77 at [email protected] with sufficient information to identify your account.

• Right of Access: You have the right to request a copy of the personal data that cgt77 holds about you, along with information about how it is being processed. cgt77 will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any personal data that cgt77 holds about you that is inaccurate, incomplete, or out of date. You may also update certain account details directly within your cgt77 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing has no other legal basis. Note that this right is subject to cgt77's legal obligations to retain certain data as described in Section 7.
• Right to Restriction: You have the right to request that cgt77 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of cgt77's legitimate interests. cgt77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where cgt77 processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

The cgt77 platform is strictly intended for adults aged 21 years and above. cgt77 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the cgt77 registration and KYC process, and accounts where the member cannot confirm they are at least 21 years of age will be closed without delay.

If cgt77 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. Any funds deposited by a person under the minimum age requirement will be returned to the original payment source after deduction of any applicable processing fees.

cgt77 primarily processes and stores personal data on servers and infrastructure located in secure data centres. In some circumstances, the operation of the cgt77 platform may involve the transfer of personal data to technology service providers, KYC partners, or infrastructure providers that are located in jurisdictions outside Bangladesh.

Where such international transfers occur, cgt77 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required under applicable data protection principles. These safeguards may include contractual data protection clauses, data processing agreements that impose equivalent security and confidentiality obligations on the receiving party, and technical measures such as end-to-end encryption of transferred data.

cgt77 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing the appropriate contractual and technical safeguards described above. By using the cgt77 platform, you acknowledge that your personal data may be transferred internationally in the circumstances described in this section, subject always to the protections outlined herein.

cgt77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to the platform that affect how personal data is handled. All updates will be published on this page at cgt77.io/privacy-policy.

Where a proposed change is material — meaning it significantly alters the scope of data collected, the purposes for which it is used, or the rights available to members — cgt77 will provide advance notice to registered members via the email address associated with their account at least 14 days before the change takes effect. Non-material clarifications and updates may be published without prior notice.

The "Effective Date" shown at the top of this Privacy Policy indicates when the current version entered into force. Continued use of the cgt77 platform after any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you should cease using the platform and contact [email protected] to request account closure and data deletion in accordance with Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the manner in which cgt77 processes your personal data, please contact the cgt77 support team using the details below. All enquiries will be acknowledged within 5 business days.

cgt77 is committed to resolving all privacy-related concerns promptly and transparently. Where a concern cannot be resolved through direct contact with the support team, members may seek further guidance through applicable consumer protection mechanisms available in Bangladesh.