Privacy Policy
How ctc77 Protects Your Data

1. Introduction

ctc77 ("we", "us", "our") operates the online betting and casino platform accessible at ctc77.io. We are committed to protecting the privacy and personal data of all individuals who use our platform ("you", "your", "Player"). This Privacy Policy sets out in clear, plain English how we collect, use, store, share, and protect your personal data, and what rights you hold in relation to that data.

This Policy applies to all personal data collected through the ctc77 website, mobile-optimised browser interface, customer support channels, and any other interaction you have with ctc77 as an organisation. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the broader agreement between you and ctc77.

ctc77 is primarily designed for and marketed to players located in Bangladesh. We recognise the importance of data privacy to our community of players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across the country, and we take our obligations in this area seriously. If you are under 21 years of age, you are not permitted to use this platform, and we will not knowingly collect your personal data.

2. Data Controller

For the purposes of this Privacy Policy, ctc77 acts as the data controller in respect of the personal data it collects from players on the platform. As data controller, ctc77 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with applicable data protection and privacy laws.

All data requests, privacy queries, and formal complaints regarding the handling of personal data should be directed to the ctc77 support team using the contact details set out in Section 16 of this Policy. ctc77 will acknowledge all written data requests within 2 business days and will provide a substantive response within 5 business days.

3. Data We Collect

3.1 Identity and Contact Data

When you register an account on ctc77, we collect your full legal name, date of birth, email address, mobile phone number, and city or region of residence within Bangladesh. We may also collect your national identification number, passport number, or other government-issued identification document details where required for age verification or Know Your Customer (KYC) compliance.

3.2 Financial Data

To facilitate deposits and withdrawals, we collect financial account reference information associated with your chosen payment methods. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this means the registered mobile number linked to your wallet. For bank transfers via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, this includes your account holder name and bank account reference. For card payments via Visa or Mastercard, we collect the card type and the last four digits only — full card numbers are never stored by ctc77 and are processed exclusively through PCI-DSS compliant payment gateways.

We also maintain a complete record of all deposit and withdrawal transactions associated with your account, including dates, amounts in Bangladeshi Taka (BDT), payment method used, and transaction status. This financial history is retained for regulatory compliance purposes.

3.3 Technical and Device Data

When you access the ctc77 platform, we automatically collect certain technical data including your IP address, device type and model, operating system version, browser type and version, time zone setting, and session authentication tokens. This data is collected via server logs and first-party tracking mechanisms for the purposes of platform security, fraud detection, and service optimisation.

3.4 Usage and Behavioural Data

We collect data about how you use the ctc77 platform, including which games you play (cricket betting, slots, Aviator, Space Max, live casino), the frequency and duration of your gaming sessions, your wagering patterns, bonus interactions, and navigation behaviour across the platform. This usage data is used primarily to support our responsible gaming monitoring programme and to improve the overall quality and relevance of the platform experience.

3.5 Communications Data

When you contact our customer support team via live chat, email (support at ctc77.io), or WhatsApp, we retain a record of your communications and any information you provide during those interactions. This includes support queries, complaint records, and any documentation you submit as part of an identity verification or dispute resolution process.

3.6 Marketing Preferences

We record your marketing communication preferences, including whether you have opted in or out of receiving promotional messages, bonus offers, and platform updates from ctc77 via email or SMS. You may update your marketing preferences at any time through your account settings or by contacting our support team.

4. How We Collect Your Data

ctc77 collects personal data through the following means:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, contacting support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically via server logs, session tracking, and first-party cookies when you access and navigate the ctc77 platform.
• Third-party providers: Identity verification data returned by our KYC service providers following document checks; fraud scoring data from our anti-fraud partners; and transaction confirmation data from payment processors including bKash, Nagad, and Rocket.
• Publicly available sources: In limited circumstances, ctc77 may verify information against publicly available databases as part of our anti-money laundering (AML) compliance obligations.

5. Legal Basis for Processing

ctc77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your ctc77 account, process deposits and withdrawals, settle bets, and deliver the core platform services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, tax record-keeping, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out to protect the security and integrity of the ctc77 platform, prevent fraud and abuse, resolve disputes, improve platform performance, and conduct responsible gaming monitoring — where such interests are not overridden by your privacy rights.
• Consent: Processing for the purpose of sending marketing communications and promotional offers, where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

6. How We Use Your Data

ctc77 uses the personal data we collect for the following purposes:

• To create, manage, and maintain your ctc77 account.
• To verify your identity and age in accordance with our 21+ minimum age policy and KYC obligations.
• To process deposits and withdrawals via your registered payment methods (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard).
• To settle sports bets and casino game outcomes accurately and in accordance with our Terms & Conditions.
• To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• To monitor gaming behaviour for responsible gaming purposes and to intervene where signs of problem gambling are identified.
• To deliver customer support and resolve account queries, disputes, and complaints.
• To send transactional communications including deposit confirmations, withdrawal notifications, and security alerts.
• To send marketing communications and promotional offers where you have provided consent, including BPL season promotions, Eid bonus offers, and other Bangladesh-market campaigns.
• To improve the ctc77 platform, develop new features, and personalise your experience where you have consented to such personalisation.
• To comply with our legal and regulatory obligations under applicable law.

7. Data Sharing & Disclosure

7.1 Internal Access

Access to your personal data within ctc77 is restricted to personnel who require it to perform their specific role — including customer support agents, compliance officers, finance team members, and technical security staff. All ctc77 personnel with access to personal data are bound by confidentiality obligations.

7.2 Third-Party Service Providers

ctc77 shares personal data with carefully selected third-party service providers who assist us in delivering the platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC providers, fraud prevention and AML screening services, game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), and cloud hosting and infrastructure providers. All third-party processors are contractually required to handle your data in accordance with applicable data protection standards and to use it solely for the purpose for which it was shared.

7.3 Legal and Regulatory Disclosure

ctc77 may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts of law where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of ctc77, its players, or third parties. ctc77 will notify affected players of such disclosures where legally permitted to do so.

7.4 No Sale of Data

ctc77 does not sell, rent, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing companies. Your personal data is used exclusively for the purposes described in this Privacy Policy.

8. Cookies & Tracking Technologies

ctc77 uses first-party cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us deliver a functional and secure experience. The cookies we use fall into the following categories:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, game lobby layout, and notification preferences, so that your experience is consistent across sessions.
• Analytical cookies: Used to collect anonymised data about how players navigate and use the platform, helping us identify areas for improvement. This data is aggregated and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and multiple account creation from the same device.

ctc77 does not use third-party advertising cookies or cross-site tracking technologies. You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to log in to or use certain features of the ctc77 platform.

9. Data Retention

ctc77 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements. The general retention schedule applied by ctc77 is outlined in the Data Categories table at the top of this Policy.

Financial transaction records are retained for a minimum of 7 years following the date of the transaction, in compliance with applicable anti-money laundering regulations and financial record-keeping requirements. Identity and KYC documentation is retained for the duration of the account relationship plus 5 years following account closure. Technical and usage data is retained for up to 24–36 months from the date of collection.

Upon the expiry of the applicable retention period, personal data is securely deleted from ctc77 systems or irreversibly anonymised such that it can no longer be linked to any individual. Where you request deletion of your data prior to the end of the relevant retention period, ctc77 will delete all data that is not subject to a mandatory legal retention obligation.

10. Data Security

ctc77 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ctc77 platform.
• Encryption of sensitive data at rest within our database systems.
• Role-based access controls limiting internal data access to authorised personnel only.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication for all internal administrative systems.
• Automated monitoring and alerting for unusual access patterns or potential security incidents.
• Defined incident response procedures to manage and contain any data breach quickly and effectively.

In the event of a data breach that poses a significant risk to your rights and freedoms, ctc77 will notify affected players without undue delay and will take all necessary steps to mitigate the impact of the breach.

While ctc77 takes data security extremely seriously and invests significantly in protective measures, no online platform can guarantee absolute security. You are responsible for keeping your ctc77 account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

11. Your Rights

As a player on the ctc77 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 16:

• Right of Access: You have the right to request a copy of the personal data ctc77 holds about you. We will provide this within 5 business days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request that ctc77 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 9.
• Right to Restriction of Processing: You may request that ctc77 restrict the processing of your personal data in certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: You may request a copy of the personal data you provided to ctc77 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis, or where we are processing your data for direct marketing purposes.
• Right to Withdraw Consent: Where ctc77 processes your personal data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ctc77 will not charge a fee for processing data rights requests in ordinary circumstances. We reserve the right to decline requests that are manifestly unfounded, repetitive, or excessive.

12. Children & Minors

The ctc77 platform is strictly for adults aged 21 and above. ctc77 does not knowingly collect, store, or process the personal data of any individual under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and permanently close the associated account.

If you are a parent or guardian and believe that a minor under your care has registered on ctc77 or provided personal data to us, please contact our support team immediately at support at ctc77.io. We will investigate and act on all such reports as a matter of priority.

13. Third-Party Services

The ctc77 platform incorporates content and functionality provided by certified third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you play games supplied by these providers, some technical data (such as your session token and game history) may be shared with the relevant provider for the purpose of delivering and recording gameplay. These providers operate under contractual data processing agreements with ctc77 and are not permitted to use this data for any independent purpose.

Payment processing for bKash, Nagad, Rocket, Upay, and card payments is handled by third-party payment gateways. When you initiate a deposit or withdrawal, you will interact with these providers' secure payment interfaces. ctc77 does not store full payment credentials; the relevant payment provider's privacy policy applies to the data processed within their environment.

ctc77's platform does not contain links to external third-party websites. If you arrive at ctc77 from an external source, please be aware that ctc77 is not responsible for the privacy practices of that external site and this Privacy Policy applies solely to data collected on the ctc77 platform.

14. International Data Transfers

ctc77 operates under an international gaming licence and may process or store personal data on servers located outside of Bangladesh. Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as the country in which it was collected, ctc77 will ensure that appropriate safeguards are in place prior to any such transfer.

Such safeguards may include standard contractual clauses, data processing agreements with receiving parties, or other legally recognised transfer mechanisms. By using the ctc77 platform and accepting this Privacy Policy, you acknowledge and consent to the potential transfer of your personal data outside of Bangladesh for the purposes described herein.

15. Changes to This Policy

ctc77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we begin collecting a new category of personal data or change the purposes for which data is used — we will provide advance notice to registered players via the platform or by email to the address registered on your account. The effective date of the revised Policy will be displayed at the top of this page.

Your continued use of the ctc77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any material change, you should cease using the platform and contact our support team to request account closure before the revised Policy takes effect.

16. Contact & Data Requests

For all privacy-related queries, data access requests, data deletion requests, or formal complaints regarding ctc77's handling of your personal data, please contact our support team through the following channels:

• Email: support at ctc77.io (plain text — not a clickable link)
• Live Chat: Available 24/7 via the ctc77 platform
• WhatsApp: Contact details provided after login
• Response Time: Acknowledgement within 2 business days; substantive response within 5 business days (Bangladesh Standard Time, UTC+6)

When submitting a data request, please provide sufficient information to allow us to verify your identity and locate your account. ctc77 may request a copy of your identification document before processing certain data rights requests to protect against unauthorised access to your personal data.