cu77 Privacy Policy

This Privacy Policy ("Policy") describes how cu77 ("cu77", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("players", "you", "your") who access or use the cu77 online casino and sports betting platform available at cu77.io.

cu77 is committed to handling personal data with care, transparency, and respect. This Policy is written in plain English so that players based in Bangladesh and elsewhere can clearly understand their rights and our obligations. Where technical or legal terms are used, we have aimed to explain them in accessible language.

This Policy should be read in conjunction with the cu77 Terms & Conditions and the cu77 Responsible Gaming Policy, all of which form part of the agreement between cu77 and its registered players. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

cu77 collects personal data across several categories, depending on the nature of your interaction with the platform. The categories of personal data we process are set out in the table below.

cu77 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information. If such data is inadvertently included in documentation submitted for KYC purposes (for example, a national identity card that lists religion), it will not be recorded or processed beyond what is necessary for identity verification.

cu77 collects personal data through the following channels:

• Direct interactions: Data you provide when creating your cu77 account, completing KYC verification, making deposits or withdrawals, contacting the support team, or updating your account preferences.
• Automated technical collection: When you visit cu77.io, our servers automatically record technical data such as your IP address, browser type, and session information. This data is collected via server logs, cookies, and similar tracking technologies (see Section 8 for full cookie details).
• Third-party sources: cu77 may receive data from identity verification providers, payment processors (bKash, Nagad, Rocket, Upay), and fraud prevention services for the purpose of verifying your identity and protecting your account.
• Game providers: Third-party game suppliers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may share aggregated or individual session data with cu77 for dispute resolution, responsible gaming monitoring, and platform improvement purposes.

cu77 processes your personal data for the following specific purposes:

1. Account management: To create, maintain, and administer your cu77 player account, including authentication, password resets, and account security alerts.
2. Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with our KYC procedures.
3. Payment processing: To facilitate deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and other supported payment channels.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct as defined in the cu77 Terms & Conditions.
5. Responsible gaming: To monitor gaming activity for indicators of problem gambling, to enforce self-exclusion requests, and to apply deposit limits or time-out periods requested by the player.
6. Customer support: To respond to enquiries, resolve account disputes, and deliver the assistance you request through our live chat and email support channels.
7. Platform improvement: To analyse aggregated usage data, identify technical issues, optimise platform performance, and develop new features and products.
8. Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
9. Legal compliance: To comply with applicable laws, respond to lawful requests from government or regulatory authorities, and enforce our contractual rights.

cu77 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our obligations under the cu77 Terms & Conditions, including account management, payment processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws, including KYC and anti-money-laundering requirements.
• Legitimate interests: Processing carried out for cu77's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cu77 does not sell or rent your personal data to any third party. We may share your data in the following limited circumstances:

• Payment processors: Financial data is shared with bKash, Nagad, Rocket, Upay, and other payment service providers strictly to process your deposit and withdrawal transactions.
• Identity verification providers: Identity and contact data may be shared with KYC service partners to verify your age, identity, and address as part of our account verification process.
• Game providers: Gaming activity data is shared with third-party game suppliers to the extent required to deliver their game products on the cu77 platform and to resolve any game-related disputes.
• Fraud and security services: Technical data and account activity may be shared with specialist fraud prevention and cybersecurity providers to protect the integrity of the platform and your account.
• Legal and regulatory authorities: cu77 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so or where we believe disclosure is necessary to protect the rights, safety, or property of cu77 or its players.
• Business transfers: In the event that cu77 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom cu77 shares personal data are required to process that data solely for the specified purpose and to maintain appropriate security standards. cu77 does not permit third-party service providers to use your data for their own marketing or commercial purposes.

cu77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

As a general rule, cu77 applies the following retention periods:

• Active account data: Retained for the full duration of your account registration with cu77 and for a period of five (5) years following account closure or last activity, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with financial record-keeping best practice.
• KYC documentation: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication forms part of an ongoing dispute or investigation.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent as evidence of the consent history.

When personal data is no longer required, cu77 will securely delete or anonymise it so that it can no longer be attributed to any individual player.

cu77.io uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, and gather analytics data that helps us improve the user experience for players across Bangladesh.

The types of cookies cu77 uses are as follows:

• Strictly necessary cookies: These are essential for the platform to function. They enable core functions such as session management, authentication, and security. These cookies cannot be disabled.
• Functional cookies: These remember your preferences — such as language settings and display preferences — to provide a more personalised experience on your next visit.
• Analytics cookies: These collect anonymised information about how players navigate the cu77 platform, which pages are visited most frequently, and where technical errors occur. This data helps cu77 identify areas for improvement.
• Marketing cookies: These are only set where you have consented to receiving personalised promotional content. They help cu77 present offers that are relevant to your gaming activity and preferences.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling functional or analytics cookies may affect the quality of your experience on the cu77 platform. Disabling strictly necessary cookies will prevent the platform from functioning correctly.

cu77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cu77.io.
• Encrypted storage of all personally identifiable information and financial data at rest.
• Role-based access controls ensuring that personal data is accessible only to cu77 staff who have a legitimate operational need to view it.
• Regular internal security audits and vulnerability assessments of the cu77 platform infrastructure.
• Two-factor authentication available to all cu77 player accounts to protect against unauthorised login attempts.
• Incident response procedures in place to address and contain any data breach in a timely manner.

While cu77 takes all reasonable steps to protect your personal data, no data transmission over the internet or method of electronic storage is completely secure. Players are encouraged to use a strong, unique password for their cu77 account and to enable two-factor authentication. If you believe your account has been compromised, please contact the cu77 support team immediately at [email protected].

As a cu77 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact the cu77 support team via live chat or at [email protected]. cu77 will respond to all valid requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of the personal data cu77 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that cu77 corrects any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request that cu77 deletes your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: You have the right to request that cu77 restricts the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you provided to cu77 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling, at any time on grounds relating to your particular situation.

cu77 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

The cu77 platform is strictly intended for adults aged 21 years and above. cu77 does not knowingly collect personal data from any individual under the age of 21. Age verification is performed as part of the account registration and KYC process.

If cu77 identifies or has reasonable cause to believe that a registered account belongs to a person under the age of 21, the account will be suspended immediately, all personal data associated with the account will be reviewed, and any deposits will be returned in full. Bonus winnings accrued in connection with an underage account will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered a cu77 account, please contact us immediately at [email protected] so that we can take appropriate action without delay.

The cu77 platform integrates third-party services to deliver its full range of products, including live casino games from Evolution Gaming and Ezugi, RNG slots from Pragmatic Play, NetEnt, and Microgaming, and crash games from Spribe. Each of these providers operates under its own privacy and data protection policies.

cu77 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose technology is integrated into the cu77 platform. cu77 selects third-party partners who demonstrate appropriate data security standards and contractually binds them to process player data only as directed by cu77 and only for the purposes specified in their service agreements.

cu77.io does not contain links to external third-party websites. In the event that such links are introduced in future, this Policy will be updated accordingly, and users will be notified that external sites operate under their own privacy policies for which cu77 accepts no responsibility.

cu77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When a material change is made to this Policy, cu77 will notify registered players via email or a prominent notice within the platform prior to the change taking effect.

The "Last Updated" date displayed at the top of this page and in the hero section above will always reflect the date of the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how cu77 protects your personal data. Your continued use of the cu77 platform following the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how cu77 has handled your personal data, please contact the cu77 Data Support team through one of the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing.
• Live Chat: Available 24 hours a day, 7 days a week, directly from the cu77 platform after logging in to your account.
• Support Hours: All times in Bangladesh Standard Time (BST, UTC+6). cu77 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days.

If you are not satisfied with the way cu77 has handled your data privacy concern after raising it through our support team, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in your jurisdiction.