227bet Privacy Policy

★ Privacy at a Glance

This Privacy Policy ("Policy") describes how 227bet ("we", "us", "our") collects, stores, uses, and shares personal data relating to individuals ("you", "the Player") who register for, access, or use any part of the 227bet platform at https://227bet.onl. By creating an account or continuing to use the platform, you acknowledge that you have read this Policy and consent to the data practices described herein.

227bet is committed to handling personal data responsibly. We collect only what is necessary, store it securely, and never sell it to third-party advertisers. The sections below set out our data practices in full detail.

1 Personal Data We Collect

227 bet collects personal data in three main ways: information you provide directly during registration and account use, information generated automatically by your use of the platform, and information received from third-party payment providers when you make a deposit or withdrawal.

2 How We Use Your Personal Data

227bet processes personal data only for specific, legitimate purposes. We do not use your data for any purpose incompatible with the reasons for which it was originally collected. The table below sets out each processing purpose and its legal basis.

• Account Management: We use your registration and contact data to create and maintain your 227bet account, authenticate your identity on login, and communicate account-related updates such as password changes or security alerts.
• Payment Processing: Financial data is used solely to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to reconcile your account balance accurately.
• Identity Verification (KYC): Identity documents are reviewed to confirm that you meet the 21+ age requirement and to satisfy our anti-money laundering obligations. Documents are reviewed by authorised 227bet staff only and are not shared externally except where required by law.
• Fraud Prevention & Security: Technical and device data, combined with gaming history, is analysed by automated systems to detect unusual activity, prevent unauthorised account access, identify bonus abuse, and protect the integrity of the platform.
• Responsible Gaming: Gaming history and deposit patterns are monitored to identify players who may be exhibiting signs of problem gambling. Where indicators are present, 227bet may proactively reach out with responsible gaming information or apply account-level protective measures.
• Legal & Regulatory Compliance: Certain data is retained to comply with applicable financial crime prevention obligations and to respond to lawful requests from regulatory authorities. 227bet will disclose data to authorities only where legally compelled to do so.
• Platform Improvement: Aggregated, anonymised usage data (with no personally identifiable information) is used to understand how players interact with the platform and to improve game offerings, navigation, and overall user experience.
• Customer Support: Support communication records are used to resolve your queries accurately and efficiently, and to maintain a consistent service history across multiple interactions.

3 Data Sharing & Third Parties

227bet does not sell, rent, or share your personal data with third parties for their own commercial or marketing purposes. Data is shared with external parties only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment Providers: When you initiate a deposit or withdrawal, the necessary transaction data is transmitted to the relevant payment provider (bKash, Nagad, Rocket, Upay, or your chosen bank). Each provider processes this data under its own privacy policy and security standards. 227bet is not responsible for the data practices of third-party payment providers once data leaves our systems.
• Game Providers: Certain casino game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt) receive a session token and anonymised player identifier when you launch their games. This is technically necessary to initiate the game session. Game providers do not receive your full name, contact details, or payment information.
• Identity Verification Services: During KYC review, identity document images may be processed by a trusted third-party verification partner operating under strict confidentiality agreements with 227bet. Documents are not retained by the verification partner beyond the duration required to complete the check.
• Law Enforcement & Regulatory Authorities: 227bet may disclose personal data to Bangladeshi law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or lawful regulatory request. We will notify you of such a disclosure where we are legally permitted to do so.
• Business Transfers: In the event that 227bet undergoes a merger, acquisition, or transfer of all or part of its business assets, personal data held at the time of the transaction may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will be preserved.

4 Data Retention

227bet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The following retention periods apply as a general guide:

• Active Account Data: All personal data associated with an active 227bet account is retained for the full duration of the account's active status. This includes registration details, KYC documents, transaction history, and gaming records.
• Post-Closure Retention: Following account closure — whether initiated by the player or by 227bet — core account records including identity documents, transaction logs, and KYC documentation are retained for a minimum period of five (5) years. This retention is required to comply with anti-money laundering regulations and to support the resolution of any post-closure disputes.
• Support Records: Live chat and email support records are retained for a period of two (2) years from the date of each interaction, after which they are anonymised or permanently deleted.
• Technical Logs: Server access logs and device data used for security monitoring are retained for a rolling period of ninety (90) days, after which they are automatically purged unless flagged as part of an active fraud investigation.
• Marketing Consent Records: Where you have opted in to marketing communications, a record of your consent is retained for as long as the consent remains active and for one (1) year following any withdrawal of consent, to evidence compliance.

When the applicable retention period expires and no legal obligation requires continued storage, 227bet securely deletes or anonymises the relevant personal data so that it can no longer be attributed to any individual.

5 Cookies & Tracking Technologies

The 227bet platform uses a minimal set of cookies to ensure the site functions correctly. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that share your behaviour with external data networks.

• Session Cookies: These cookies are strictly necessary for the platform to operate. They maintain your login state during an active session, remember your game preferences within a session, and preserve form input data temporarily. Session cookies are automatically deleted when you close your browser.
• Security Cookies: Short-lived cookies used to protect against cross-site request forgery (CSRF) and session hijacking attacks. These cookies contain no personal data and exist solely to protect your account security.
• Preference Cookies: If you set display preferences within your 227bet account (such as language or notification settings), a persistent cookie may store these preferences locally so they are applied on your next visit. These cookies contain no personally identifiable information and expire after 12 months.

6 Data Security

227bet implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in Transit: All data exchanged between your device and 227bet servers is protected by TLS 1.2 or higher (256-bit SSL). The platform URL is served exclusively over HTTPS. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields — including identity document images, KYC records, and payment identifiers — are encrypted at rest using AES-256 encryption on 227bet's database infrastructure.
• Password Security: Account passwords are hashed using a modern one-way cryptographic algorithm before storage. 227bet staff cannot retrieve your password in plain text. In the event of a forgotten password, a reset link is issued to your registered mobile number.
• Access Controls: Internal access to personal data is restricted to authorised 227bet staff on a strict need-to-know basis. All internal access events are logged and subject to periodic audit.
• New Device Alerts: When your 227bet account is accessed from a device or IP address that has not been seen before, an automated security alert is sent to your registered mobile number. If you do not recognise the login, you are advised to change your password immediately and contact support.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected players, 227bet will notify impacted individuals as promptly as practicable. The notification will describe the nature of the breach, the categories of data affected, and the steps players should take to protect themselves.

7 Your Data Rights

As a registered player on 227bet, you hold the following rights with respect to your personal data. To exercise any of these rights, contact 227bet support via live chat inside your account or by email. 227bet will respond to all verified data rights requests within 30 days.

• Right of Access You may request a complete copy of all personal data that 227bet holds about you, including your registration details, KYC records, transaction history, and gaming logs. We will provide this in a readable format within 30 days of a verified request.
• Right to Rectification If any personal data we hold about you is inaccurate or out of date, you have the right to request that it be corrected. Some data fields — such as your legal name or date of birth — may require supporting documentation before a correction can be applied.
• Right to Erasure You may request deletion of your personal data. Please note that this right is subject to legal limitations: data that must be retained to comply with anti-money laundering regulations or to resolve outstanding disputes cannot be erased until the applicable retention period has expired.
• Right to Data Portability You may request a structured, machine-readable export of the personal data you have provided to 227bet (such as account registration details and transaction history) in a commonly used format.
• Right to Withdraw Consent Where 227bet processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Restrict Processing In certain circumstances — for example, where you contest the accuracy of data we hold or where you object to our use of it — you may request that we restrict active processing of that data while the matter is under review.
• Right to Object You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, and 227bet will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

8 Minors & Under-21 Players

The 227bet platform is strictly restricted to individuals aged 21 years and above. 227bet does not knowingly collect personal data from persons under the age of 21. If 227bet becomes aware that an account has been registered by an individual under 21, the account will be suspended immediately, all associated data will be reviewed, and any balance will be withheld pending investigation. Verified underage accounts are permanently closed and their data is retained only for the minimum period required by law before secure deletion.

If you are a parent or guardian and believe that a person under your care has registered an account on 227bet without authorisation, please contact our support team immediately via live chat or by email at support@227bet.onl. We will investigate and act promptly upon receipt of a credible report.

9 Updates to This Policy

227bet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, we will publish the updated Policy at https://227bet.onl/privacy-policy and, where practicable, notify registered players via an in-platform notification or a message to their registered mobile number.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the 227bet platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.