bv77 Privacy Policy

This Privacy Policy ("Policy") is published by bv77, the operator of the online casino and sports betting platform accessible at bv77.bio ("the Platform"). This Policy applies to all persons who visit, register on, or otherwise interact with the bv77 Platform, including registered players based in Pakistan and any other jurisdiction from which access is permitted.

bv77 is committed to protecting the privacy and personal data of all users in accordance with applicable data protection laws and its licensing obligations. This Policy describes in plain, transparent terms what personal information we collect, why we collect it, how we use and protect it, and what rights you have as a data subject.

This Policy should be read alongside bv77's Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement governing your relationship with bv77. In the event of any conflict between this Policy and the Terms and Conditions on a privacy-related matter, this Policy shall take precedence.

bv77 collects personal data that is necessary for the operation of a licensed online gaming and betting platform. The categories of personal data we collect, and examples of the specific data points within each category, are set out in the table below:

bv77 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering your bv77 account, completing identity verification (KYC), making deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, or contacting bv77 support via live chat or email.
• Automated Collection: Technical and usage data collected automatically when you access the bv77 Platform, including via server logs, cookies, pixel tags, and session tracking technologies described in Section 09 of this Policy.
• Third-Party Sources: Identity verification and fraud prevention data from licensed KYC service providers. Payment transaction data from our integrated Pakistani payment gateways. In limited circumstances, publicly available data used to validate identity or detect fraudulent registration attempts.
• Responsible Gaming Interactions: Data disclosed voluntarily by you when using bv77's responsible gaming tools, including deposit limits, self-exclusion requests, cooling-off periods, and session reminders.

bv77 uses your personal data only for clearly defined, legitimate purposes. The following table outlines the specific purposes for which each category of data is processed:

• Account Registration & Management: To create and maintain your bv77 player account, verify your identity, manage your bv77 login access, and provide customer support.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, verify payment source ownership, and prevent payment fraud.
• Regulatory Compliance: To fulfil bv77's obligations under its operating licence, including Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) screening, and reporting obligations to relevant regulatory authorities.
• Platform Security: To detect and prevent fraud, unauthorised account access, collusion, and other prohibited conduct as defined in bv77's Terms and Conditions. Technical data is used to identify suspicious login patterns and protect account integrity.
• Responsible Gaming: To operate bv77's responsible gaming tools, including deposit limit enforcement, self-exclusion, cooling-off periods, and session reality checks. Usage data is analysed to identify patterns that may indicate problematic gambling behaviour.
• Personalisation & Platform Improvement: To improve the bv77 Platform experience, personalise content and game recommendations, and analyse aggregate usage trends. This processing is conducted on anonymised or pseudonymised data wherever possible.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw marketing consent at any time as described in Section 10.
• Legal & Dispute Resolution: To retain records necessary for resolving player complaints, managing legal claims, and fulfilling applicable record-keeping obligations under law.

bv77 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil bv77's obligations under the Terms and Conditions you accepted at registration — including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws and licensing conditions, including KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing carried out to pursue bv77's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your data protection rights.
• Consent: Processing for purposes where your explicit consent has been obtained, including marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

bv77 does not sell your personal data to third parties. Your data may be shared with carefully selected third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction-relevant data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial regulations.
• Identity Verification Providers: Licensed KYC and AML service providers receive identity data necessary to verify your CNIC, passport, or other identification documents as part of bv77's compliance obligations.
• Technology Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who process data on bv77's behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory & Law Enforcement Authorities: When required by law, court order, or regulatory direction, bv77 may disclose personal data to the relevant licensing authority, financial intelligence unit, or law enforcement agency. bv77 will notify you of any such disclosure to the extent permitted by law.
• Responsible Gaming Organisations: In limited circumstances and with your consent, bv77 may share relevant data with accredited responsible gaming support organisations to facilitate intervention or assistance programmes.

bv77 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered bv77 account, plus a minimum period of five (5) years following account closure to satisfy AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable anti-money laundering regulations.
• KYC Verification Documents: Retained for the duration of the account relationship plus five (5) years post-closure, or longer if required by a specific regulatory direction.
• Communications & Complaint Records: Retained for three (3) years from the date of the last communication or complaint resolution.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud prevention purposes, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent, after which your preference to not receive marketing communications is recorded and retained indefinitely to prevent future unsolicited contact.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bv77's data destruction procedures.

bv77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and bv77's servers, including during bv77 login sessions and payment transactions.
• Encryption at rest for sensitive personal data stored in bv77's database infrastructure, including CNIC numbers, financial references, and authentication credentials.
• Role-based access controls ensuring that bv77 staff can only access personal data necessary for their specific operational function. Access to sensitive data is logged and audited.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists to identify and remediate potential weaknesses in bv77's platform architecture.
• Two-factor authentication support for player accounts linked to Pakistani mobile numbers, providing an additional layer of login security beyond the standard password.
• Incident response procedures that include prompt notification to affected players and relevant authorities in the event of a data breach that poses a risk to your rights and freedoms.

bv77 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. The following categories of cookies are used on the bv77 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during your bv77 session, security tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and display options. These cookies enhance your experience but are not strictly required for the Platform to operate.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the bv77 Platform. This data helps bv77 understand which features are most used and where improvements can be made. Analytics cookies do not identify you personally.
• Marketing Cookies: Used to deliver promotional content relevant to your interests based on your on-Platform activity. Marketing cookies are only placed with your explicit consent and can be withdrawn at any time through your account settings or browser preferences.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the bv77 Platform, including your ability to maintain a logged-in session or access personalised features.

As a data subject whose personal information is processed by bv77, you have the following rights with respect to your personal data. To exercise any of these rights, contact bv77's support team at [email protected]:

• Right of Access: You may request a copy of all personal data bv77 holds about you, together with information about how it is being used. bv77 will respond to access requests within 30 days.
• Right to Rectification: If any personal data bv77 holds about you is inaccurate or incomplete, you have the right to request its correction. You may also update certain account details directly through your bv77 account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other lawful basis for processing applies. Note that bv77 may be required to retain certain data for regulatory and legal compliance purposes even after an erasure request.
• Right to Restrict Processing: You may request that bv77 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or a legitimate interests objection is under review.
• Right to Data Portability: Where processing is based on your consent or a contractual obligation, you may request that bv77 provides your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on bv77's legitimate interests, including profiling for personalisation purposes. You also have an absolute right to object to direct marketing at any time.
• Right to Withdraw Consent: Where bv77 relies on your consent to process personal data — including for marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The bv77 Platform is strictly intended for adults aged 21 years and above. bv77 does not knowingly collect personal data from any person under the age of 21. The 21+ age threshold applies to all bv77 products and services, including cricket betting, PSL markets, live casino tables, slots, Joker Poker, and jackpot games.

If bv77 becomes aware, through its identity verification process or any other means, that personal data has been submitted by or on behalf of a person under the age of 21, the associated account will be immediately suspended, all real-money balances will be withheld pending investigation, and the personal data will be securely deleted without further processing.

bv77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or bv77's data processing practices. When material changes are made to this Policy, bv77 will notify registered players by email to the address associated with their account and by displaying a prominent notice on the bv77 Platform for a reasonable period before the changes take effect.

Minor amendments — including typographical corrections, clarifications of existing provisions, or updates required to reflect changes in bv77's service providers — may be made without prior notice. The current version of this Privacy Policy, together with its effective date, is always accessible at bv77.bio/privacy-policy.

Continued use of the bv77 Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with bv77's Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or bv77's handling of your personal data, please contact bv77's support team using the details below. All privacy-related enquiries are handled by bv77's dedicated compliance team:

• Email: [email protected] — Available 24/7, with a target response time of under 4 hours for all player enquiries.
• Live Chat: Accessible directly from the bv77 Platform dashboard during your logged-in session. Available around the clock for all registered Pakistani players.

When submitting a privacy-related request, please include your registered email address or Pakistani mobile number to allow bv77 to verify your identity before processing your request. This verification step is necessary to protect your data against unauthorised access requests made by third parties claiming to act on your behalf.