crn77 Privacy
Policy

01 Information We Collect

When you register for an account, make a deposit, place a wager, or otherwise interact with the crn77 platform, we collect certain categories of personal data. The information we collect falls into three broad categories: data you provide to us directly, data we collect automatically as you use the platform, and data we receive from third parties such as payment processors and identity verification services.

Data You Provide Directly

When you create a crn77 account, you are required to provide personal information that allows us to identify you, communicate with you, and process your financial transactions. This includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth (required to verify that you are 18 years of age or older)
• Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address — used for account communications, password resets, and promotional messages where consent has been given
• Mobile phone number — used for account security, two-factor authentication where applicable, and transactional notifications
• Payment method details, including the mobile wallet number (bKash, Nagad, Rocket, Upay) or bank card information (Visa, Mastercard) associated with your account
• KYC documentation including copies of your National Identity Card (NID), passport, or other government-issued identification, and any supporting proof-of-address documents
• Any communications you send to the crn77 support team, including the content of support requests, complaint submissions, and feedback messages

Data Collected Automatically

When you browse or use the crn77 platform, certain technical data is collected automatically through standard server logging and cookie mechanisms. This includes:

• IP address and approximate geolocation data derived from your IP address
• Device type, operating system, and browser version
• Pages visited on the crn77 platform, time spent on each page, and navigation paths
• Game session data, including games played, wager amounts, outcomes, and session duration
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• Login timestamps and session tokens used to maintain your authenticated session
• Referral source data, if you arrived at crn77 via a tracked marketing link

Data from Third Parties

crn77 may receive personal data about you from third-party service providers who assist us in delivering the Services. This includes:

• Identity verification results from KYC service providers who process your identification documents
• Payment confirmation data from mobile financial service providers including bKash, Nagad, Rocket, and Upay, and from card processors handling Visa and Mastercard transactions
• Fraud and risk signals from fraud prevention services used to protect the platform and its players
• Game play data from our third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which is used for player account management and dispute resolution

02 How We Use Your Data

crn77 uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy without first obtaining your explicit consent or being legally required to do so. The primary purposes for which crn77 processes personal data are as follows:

Purpose	Data Used	Why Necessary
Account registration and management	Name, date of birth, email, phone number, address	Required to create and maintain your crn77 account and verify your eligibility to play
Identity and age verification (KYC)	NID / passport, date of birth, address documents	Legal obligation to prevent underage gambling and comply with anti-money-laundering requirements
Processing deposits and withdrawals	Payment method details, transaction records	Necessary to execute financial transactions and maintain accurate account balances in BDT
Providing casino and sports betting services	Game session data, wager history, account balance	Core service delivery — required to operate games, settle bets, and award winnings
Customer support	Account data, support correspondence, transaction records	Necessary to investigate and resolve queries, complaints, and disputes
Fraud prevention and platform security	IP address, device data, login history, transaction patterns	Legitimate interest in protecting crn77 and its players from fraud, account takeover, and financial crime
Responsible gaming monitoring	Wager history, session data, deposit frequency	Legal and ethical obligation to identify and support players who may be experiencing gambling-related harm
Marketing communications (where consented)	Email address, game preferences, deposit history	To send relevant promotional offers, bonus notifications, and BPL / IPL betting alerts — only where you have opted in
Platform analytics and improvement	Navigation data, session duration, device type	Legitimate interest in understanding how players use crn77 and improving the user experience

Marketing Communications

crn77 will only send you direct marketing communications — including emails about new games, deposit bonuses, seasonal promotions, and cricket betting offers — if you have provided your explicit consent to receive such messages during registration or subsequently through your account preferences. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or updating your notification preferences within your account settings. Withdrawal of marketing consent does not affect your ability to use any crn77 service.

03 Legal Basis for Processing

crn77 processes personal data only where it has a valid legal basis to do so. Depending on the specific processing activity, we rely on one or more of the following legal bases:

Contractual Necessity

The majority of data processing carried out by crn77 is necessary to perform the contract we have entered into with you when you register an account and accept our Terms & Conditions. This includes processing your registration information, managing your account, executing deposits and withdrawals in BDT, settling wagers, and providing customer support. Without processing your personal data for these purposes, we would be unable to provide the crn77 Services.

Legal Obligation

Certain processing activities are required by law. crn77 is legally obligated to conduct Know Your Customer (KYC) identity verification, implement anti-money-laundering controls, retain financial transaction records for a defined period, and report certain categories of suspicious activity to relevant authorities. We process personal data for these purposes regardless of your preferences, as the legal obligation overrides individual consent.

Legitimate Interests

In some cases, crn77 processes personal data on the basis of its legitimate interests as a gaming platform, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interest processing at crn77 includes fraud detection, platform security monitoring, responsible gaming interventions, and aggregate platform analytics used to improve the user experience. We conduct a balancing assessment before relying on legitimate interests and do not use this basis where your privacy interests are likely to take precedence.

Consent

Where crn77 has no other legal basis, we will ask for your explicit consent before processing your personal data. The primary area where we rely on consent is direct marketing communications. You have the right to withdraw consent at any time without penalty, and withdrawal of consent will not affect the lawfulness of processing that took place prior to withdrawal.

04 Data Sharing & Disclosure

crn77 does not sell, rent, or trade your personal data to any third party. However, in order to deliver the Services and meet our legal obligations, we do share certain categories of personal data with a limited set of trusted service providers and in specific legally required circumstances.

Service Providers

crn77 works with a carefully selected group of third-party service providers who process personal data on our behalf, under strict data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service. These providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, and other financial institutions through which your deposits and withdrawals are processed. These providers receive only the transaction data necessary to execute each payment.
• KYC and identity verification providers — Specialist services that process your identity documents to verify your age and identity on behalf of crn77. These providers are bound by strict confidentiality obligations.
• Game providers — Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Game providers receive pseudonymous player identifiers and game session data necessary to operate their games within the crn77 platform.
• Fraud prevention services — Providers of fraud detection and risk management tools that analyse transaction and behavioural data to identify suspicious activity on the platform.
• IT and hosting infrastructure — Cloud infrastructure and data centre providers that host the crn77 platform and its databases. These providers have no independent access to your personal data beyond what is required for infrastructure maintenance.
• Customer support platforms — Tools used to manage and respond to player support requests, which may process the content of your support correspondence.

Legal Disclosure

crn77 may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where required to do so by applicable law, court order, or regulatory instruction. We will always seek to limit such disclosures to the minimum data necessary to satisfy the legal requirement and, where legally permitted, will notify the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of crn77's business assets, personal data held by crn77 may be transferred to the acquiring entity as part of that transaction. In such circumstances, crn77 will take reasonable steps to ensure that the receiving entity is bound by privacy obligations equivalent to those in this Privacy Policy, and will notify registered players of any material change to data controllership.

05 Cookies & Tracking Technologies

crn77 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and gather aggregated analytics about how the platform is used. This section explains what cookies we use, why we use them, and what control you have over them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status, preferred language, and session data — so that the site functions correctly and your experience is personalised. Cookies do not contain executable code and cannot access other data on your device.

Types of Cookies Used by crn77

Cookie Type	Purpose	Can Be Disabled?
Essential / Strictly Necessary	Maintain your logged-in session, remember your account preferences, enable core platform functionality including deposits and game loading	No — disabling these will prevent the platform from functioning correctly
Functional	Remember your language settings, display preferences, and last-visited game categories to personalise your crn77 experience	Yes — disabling will remove personalisation but the platform will still function
Analytics	Collect aggregated, anonymised data about how players navigate the crn77 platform, which pages are visited most, and where users encounter problems	Yes — disabling will not affect platform functionality or your account
Security	Detect and prevent fraudulent account activity, bot traffic, and suspicious login attempts	No — security cookies are essential for platform integrity and player protection

Managing Cookies

Most web browsers provide controls that allow you to view, manage, and delete cookies stored on your device. You can typically access these controls through your browser's Settings or Privacy menu. Please note that disabling essential cookies will prevent you from logging in to your crn77 account and using the platform's core features. For instructions specific to your browser, refer to your browser's help documentation.

crn77 does not use third-party advertising cookies or cross-site tracking technologies that would follow you beyond the crn77 platform.

06 Data Retention

crn77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. When data is no longer required for any of these purposes, it is securely deleted or irreversibly anonymised.

Retention Periods by Data Category

Data Category	Retention Period	Reason
Account registration data (name, email, date of birth, address)	Duration of account + 5 years after closure	Legal obligation and dispute resolution
KYC identity documents (NID, passport, proof of address)	Duration of account + 5 years after closure	Anti-money-laundering legal obligation
Financial transaction records (deposits, withdrawals, wagers)	7 years from the date of each transaction	Financial regulatory requirement
Game session and betting history	3 years from the date of each session	Dispute resolution and responsible gaming monitoring
Customer support correspondence	3 years from the date of the last message in each thread	Dispute resolution and service quality review
Marketing consent records	Duration of consent + 2 years after withdrawal	Proof of consent basis for marketing processing
Analytics and platform usage data (anonymised)	Indefinitely (anonymised — not personal data)	Platform improvement and trend analysis

Account Closure and Data Deletion

When you voluntarily close your crn77 account, or when crn77 closes your account for any reason, we will retain your personal data for the periods specified in the table above. After the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual. You may request confirmation of when your data will be deleted by contacting [email protected].

07 Your Data Rights

As a crn77 player, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account email address. crn77 will respond to all data rights requests within 30 days of receipt.

Right of Access

You have the right to request a copy of all personal data that crn77 holds about you. We will provide this information in a structured, commonly used format. There is no charge for a standard access request. Where requests are manifestly unfounded, repetitive, or excessive, crn77 reserves the right to charge a reasonable administrative fee.

Right to Rectification

If any personal data crn77 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For certain data fields — such as your registered name and date of birth — we may require supporting documentation before making a correction, as these fields are verified against your KYC documents.

Right to Erasure

You may request that crn77 delete the personal data we hold about you. This right is not absolute — crn77 is legally required to retain certain categories of data (such as financial transaction records) for defined periods, and these records cannot be deleted on request. Where erasure is possible, crn77 will comply promptly. Where it is not possible due to a legal obligation, we will explain the specific retention requirement that prevents deletion.

Right to Restrict Processing

In certain circumstances — for example, while you are contesting the accuracy of data we hold, or where you have objected to processing based on legitimate interests — you may request that crn77 restrict the processing of your personal data. During a restriction period, crn77 will continue to store your data but will not actively process it beyond what is legally required.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format, and to request that we transmit that data directly to another data controller where technically feasible.

Right to Object

You have the right to object to crn77 processing your personal data where that processing is based on legitimate interests. If you object, crn77 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent

Where crn77 processes your data on the basis of your consent — primarily for direct marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal. To withdraw marketing consent, contact [email protected] or update your notification preferences in your account settings.

08 Data Security

crn77 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no digital platform can guarantee absolute security, crn77 is committed to maintaining security standards appropriate to the nature and sensitivity of the data we hold.

Technical Measures

• All data transmitted between your device and the crn77 platform is protected by TLS 1.2 or higher encryption
• Passwords are stored as salted cryptographic hashes — crn77 staff cannot read your password in plain text
• Payment data is processed through encrypted payment gateways and is never stored on crn77 servers in full — only masked references are retained
• Database access is restricted by role-based access controls, with privileged access limited to a small number of authorised personnel
• Server infrastructure is protected by firewalls, intrusion detection systems, and regular security patching
• crn77 conducts periodic security assessments to identify and remediate vulnerabilities

Organisational Measures

• All crn77 employees and contractors who handle personal data are subject to confidentiality obligations and receive data protection training
• Access to personal data is granted on a strict need-to-know basis — staff members only access data relevant to their specific role
• crn77 maintains an incident response procedure to detect, contain, and report data security incidents in a timely manner
• Third-party service providers are required to maintain equivalent security standards and are subject to data processing agreements

What You Can Do to Help

The security of your crn77 account also depends on actions you take. We strongly recommend that you:

• Use a strong, unique password for your crn77 account that you do not use on any other website or app
• Never share your crn77 login credentials with another person
• Log out of your account when using a shared or public device
• Contact [email protected] immediately if you suspect unauthorised access to your account

09 Children & Minors

crn77 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes a date-of-birth verification step, and all accounts are subject to KYC identity verification that confirms the account holder is of legal age to participate in online gambling.

If crn77 discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately suspend the relevant account, delete all personal data associated with that account, and reverse any financial transactions where possible. Any winnings accumulated by an underage player will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have registered an account with crn77, please contact [email protected] immediately. We will investigate the matter promptly and take all necessary steps to close the account and remove the associated data.

10 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how crn77 handles your personal data, please contact our support team using the details below. crn77 is committed to resolving all privacy-related queries promptly and transparently.

Contact Details

• Support email: [email protected]
• Support availability: 24 hours a day, 7 days a week
• Response time: Within 2 hours for general queries; within 3 business days for formal data rights requests
• Language: English

How to Make a Complaint

If you are dissatisfied with how crn77 has handled your personal data or responded to a data rights request, you have the right to raise a formal complaint. To do so, email [email protected] with the subject line "Privacy Complaint" and provide a clear description of your concern, the data involved, and any previous correspondence with crn77 on the matter. We will acknowledge your complaint within 3 business days and provide a substantive response within 30 days.

Policy Updates

crn77 reviews this Privacy Policy periodically and will update it when our data practices change, when we introduce new services, or when legal requirements are revised. When material changes are made, registered players will be notified by email at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the crn77 platform after a policy update constitutes acceptance of the revised terms.

We encourage you to revisit this page from time to time to stay informed about how crn77 protects your personal data. Your trust is important to us, and maintaining an honest and transparent relationship with every player in Bangladesh is a core commitment of the crn77 platform.