cm77 Privacy Policy

This Privacy Policy ("Policy") sets out how cm77 ("the Platform", "we", "us", "our"), operating the website at cm77.onl, collects, uses, stores, discloses, and protects the personal data of individuals who register accounts, access the platform, place wagers, or otherwise interact with our services.

cm77 is committed to processing personal data responsibly and transparently. This Policy is written in plain English so that players across Bangladesh — whether in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Rangpur, Barisal, Mymensingh, or Cox's Bazar — can understand exactly how their information is handled and what choices they have.

By creating an account on cm77 or by continuing to use the platform after this Policy has been updated and notified to you, you acknowledge that you have read, understood, and accepted the practices described herein. This Policy forms part of the overall agreement between you and cm77, alongside the Terms & Conditions and the Responsible Gaming Policy.

cm77 acts as the data controller for all personal data collected through the cm77.onl platform. As data controller, cm77 determines the purposes for which personal data is processed and the means by which that processing takes place.

Where cm77 engages third-party service providers — such as payment processors, identity verification providers, or technology infrastructure partners — those providers act as data processors operating strictly under cm77's instructions. cm77 enters into data processing agreements with all such providers to ensure that your data is handled to the same standards described in this Policy.

For any data-related enquiry, request, or complaint, the cm77 data team can be reached at [email protected]. All formal data-related correspondence is handled in English and will receive a substantive response within 30 days of receipt.

cm77 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from third-party verification partners during the KYC process. The categories of data we collect are as follows:

• Identity Data: Your full legal name, date of birth, and government-issued identification document details (National ID, passport, or driving licence), as required for age verification and KYC compliance.
• Contact Data: Your registered email address, mobile phone number (as registered with your bKash, Nagad, or Rocket account), and your residential address within Bangladesh.
• Financial Data: Your mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where bank transfer is used, and the last four digits of any Visa or Mastercard used for deposits.
• Gameplay and Transaction Data: Records of all games played, wagers placed, wins and losses, bonus claims and usage, deposit and withdrawal transactions, and account balance history.
• Technical and Device Data: Your IP address, device identifiers, browser type and version, operating system, screen resolution, session duration, pages visited, and error logs generated during your use of the platform.
• Communications Data: The content of your support chat sessions, emails sent to [email protected], and any feedback or complaint submissions made through the platform.
• Marketing Preference Data: Your opt-in or opt-out status for promotional communications, including preferences regarding game category promotions, BPL cricket bonus alerts, and seasonal offers.

cm77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation. If any such data is incidentally disclosed to us, it will not be processed and will be deleted promptly.

cm77 processes your personal data only for defined, lawful purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:

• Account Management: Creating and maintaining your cm77 player account; authenticating your identity at login; processing account settings changes.
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer in BDT; processing withdrawal requests; reconciling transaction records.
• KYC and Fraud Prevention: Verifying that you are at least 21 years of age; confirming that your payment methods are registered in your own name; detecting and preventing fraudulent, abusive, or money-laundering activity.
• Game and Betting Services: Delivering casino games, live dealer sessions, and sports betting markets (including cricket, football, and kabaddi); recording wager outcomes; resolving game disputes using session logs.
• Bonus and Promotion Administration: Crediting welcome bonuses, deposit match bonuses, and seasonal promotions to eligible accounts; tracking wagering requirement progress; identifying and preventing bonus abuse.
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling; enforcing player-requested deposit limits, cooling-off periods, and self-exclusion instructions; sending responsible gaming reminders where appropriate.
• Customer Support: Responding to enquiries, complaints, and disputes submitted via live chat or email; maintaining support history records for quality assurance.
• Platform Security and Improvement: Detecting unauthorised access attempts; identifying and resolving software errors; analysing usage patterns to improve navigation, performance, and game availability.
• Marketing (Consent-Based Only): Sending promotional emails, bonus alerts, and seasonal campaign notifications (Eid, Pohela Boishakh, BPL season) to players who have explicitly opted in. You may withdraw marketing consent at any time.

cm77 does not sell your personal data to any third party under any circumstances. We may share your data only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to the extent necessary to process your deposit or withdrawal transaction.
• Identity Verification Partners: Third-party KYC and age verification providers who assist cm77 in confirming player eligibility. These providers process identity documents under strict contractual data protection obligations.
• Game and Technology Providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or session-specific technical data required to deliver their game services. They do not receive your full identity or financial data.
• Legal and Regulatory Compliance: cm77 may disclose personal data where required by applicable law, court order, or to cooperate with legitimate law enforcement or regulatory enquiries. We will notify you of any such disclosure to the extent permitted by law.
• Business Continuity: In the event of a merger, acquisition, or sale of all or part of cm77's business assets, player data may be transferred to the acquiring entity, which will be bound by the same privacy obligations described in this Policy.

cm77 applies a multi-layered approach to data security. The technical and organisational measures currently in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cm77 platform is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception in transit.
• Access Controls: Access to personal data within cm77's internal systems is restricted on a strict need-to-know basis. Staff access is authenticated via multi-factor authentication and logged for audit purposes.
• Firewall and Intrusion Detection: cm77's servers are protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for abnormal access patterns and flag potential breaches in real time.
• Data Minimisation at Rest: Financial data such as full card numbers is never stored by cm77. Only tokenised or partial references (e.g., last four digits) are retained where necessary for dispute resolution.
• Regular Security Reviews: cm77 conducts periodic security assessments of its platform infrastructure, including vulnerability scanning and penetration testing, to identify and address emerging risks.
• Incident Response: In the event of a confirmed data breach that poses a risk to player rights, cm77 will notify affected players and take remedial action within the timeframes required under applicable data protection standards.

While cm77 takes all reasonable precautions to protect your data, no internet transmission is entirely without risk. You are responsible for keeping your account credentials secure and for notifying cm77 immediately at [email protected] if you suspect any unauthorised access to your account.

cm77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The general retention periods applicable to each data category are as follows:

• Active Account Data: Retained for the full duration of your active account relationship with cm77, plus a post-closure retention period as described below.
• Financial and Transaction Records: Retained for a minimum of seven (7) years following each transaction, in accordance with anti-money-laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Gameplay and Betting Logs: Retained for a minimum of three (3) years for dispute resolution purposes, and up to seven (7) years where a regulatory or legal investigation is ongoing.
• Support and Communication Records: Retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing Preference Records: Retained while your account is active. Opt-out records are retained indefinitely to ensure that unsubscribe requests are honoured.
• Technical and Log Data: Retained for up to twelve (12) months from collection, after which it is anonymised or deleted.

Upon the expiry of applicable retention periods, personal data is either securely deleted from cm77's systems or anonymised such that it can no longer be linked to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

The cm77 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit the platform. They do not contain personally identifiable information on their own, but when combined with account data they help cm77 recognise you across sessions.

The categories of cookies used by cm77 are as follows:

• Strictly Necessary Cookies: Required for core platform functionality including login session management, security token validation, and fraud detection. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional Cookies: Store your preferences such as preferred language (English), last-used payment method, and game lobby display settings to personalise your session.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — including which game categories are visited most frequently, average session duration, and error occurrences — to help cm77 improve the user experience.
• Performance Cookies: Monitor platform load times and technical performance metrics to identify and resolve latency or reliability issues for players across Bangladesh.

cm77 does not use third-party advertising cookies or behavioural tracking cookies that profile you for external marketing networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to access secure areas of the platform.

As a player on the cm77 platform, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting our data team at [email protected]. All requests will be acknowledged within 24 hours and responded to substantively within 30 days.

• Access: You may request a copy of all personal data that cm77 holds about you, including your registration information, transaction history, gameplay logs, and any communications records.
• Rectification: You may request that inaccurate or incomplete data be corrected. For example, if your registered name or address has changed, contact support and we will update your records promptly.
• Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations outlined in Section 7.
• Restriction of Processing: You may request that cm77 suspend the use of your personal data while a dispute regarding its accuracy or the lawfulness of its processing is under review.
• Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) to transfer to another service provider at your discretion.
• Objection: You may object to processing based on cm77's legitimate interests, including any profiling conducted for the purpose of personalising promotional offers. Where such an objection is raised, cm77 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Withdrawal of Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time by updating your account preferences or emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Complaint: If you believe that cm77 has failed to handle your personal data in accordance with this Policy, you are entitled to raise a formal complaint with the cm77 data team. We will investigate all complaints thoroughly and respond within 30 days.

The cm77 platform is strictly intended for adults aged 21 years or older. cm77 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the registration and KYC process, and accounts found to belong to underage individuals will be closed immediately and all associated funds frozen pending investigation.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account or provided personal data to cm77, please contact us immediately at [email protected]. We will investigate and take appropriate action, including permanent account closure and secure deletion of any personal data collected from the underage individual, without delay.

cm77 strongly encourages parents and guardians to make use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. Our Responsible Gaming page provides additional guidance and links to relevant support organisations.

cm77 primarily processes and stores personal data on servers that serve the Bangladesh region. However, certain third-party service providers — including game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may process technical and session data on infrastructure located outside Bangladesh.

Where personal data is transferred to, or accessed from, jurisdictions outside Bangladesh, cm77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include:

• Data processing agreements that impose binding privacy and security obligations on all third-party recipients of personal data.
• Transferring only the minimum data necessary for the specific processing task, in anonymised or pseudonymised form where possible.
• Conducting due diligence on the data protection practices of all international partners prior to engagement and on an ongoing basis.

cm77 does not transfer your full identity, financial, or KYC data to game software providers. Such data remains within cm77's controlled data environment at all times.

cm77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform functionality, legal obligations, or applicable data protection standards. The "Last Updated" date at the top of this page will always reflect the date on which the most recent revision was published.

Where a change to this Policy is material — meaning it substantively affects how your personal data is collected, used, or shared — cm77 will notify you by email to your registered address and/or by displaying a prominent notice on the platform at least 14 days before the change takes effect. Your continued use of the cm77 platform after the effective date of a material change constitutes your acceptance of the revised Policy.

For non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — cm77 may update this page without advance notice. We recommend reviewing this Policy periodically to stay informed of how your data is protected.

Archived versions of this Policy are available on request from [email protected] so that you can review the history of changes made to our privacy practices.

If you have any questions, concerns, or requests relating to this Privacy Policy or to cm77's handling of your personal data, please contact our data team using the details below. All correspondence is handled in English and will receive a substantive response within 30 days.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7 live chat and email support available in English
• Response Time: Acknowledgement within 24 hours; full response within 30 days
• Service Coverage: Serving players across Bangladesh Nationwide — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar