Your Privacy Matters at crn77 — How We Protect Your Data

crn77 is an online betting and casino platform operated at crn77.io, offering sports betting (with a focus on cricket, including BPL, IPL, and T20 World Cup markets), live casino games powered by Evolution Gaming and Ezugi, slots from leading providers including Pragmatic Play, NetEnt, and Microgaming, arcade crash games, and Royal Fishing games to players across Bangladesh.

For the purposes of this Privacy Policy, crn77 is the data controller responsible for the personal information of all registered and unregistered users who interact with the platform. All enquiries relating to data protection and privacy should be directed to [email protected].

This Privacy Policy is effective as of January 2026 and supersedes all prior versions. By accessing crn77 or registering an account, you agree to the practices described in this document.

crn77 collects personal information in three principal ways: directly from you during account registration and use, automatically through your interaction with the platform, and from trusted third-party service providers. The following table summarises the categories of data we collect and the source of each category.

crn77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health information unless required by law or to administer responsible gaming tools (for example, self-exclusion records).

crn77 uses personal data only for legitimate, clearly defined purposes. The following are the primary purposes for which we process your information:

• Account Management: To create, maintain, and administer your crn77 account, including authenticating your identity at login, storing your preferences, and maintaining your Wallet balance in Bangladeshi Taka (৳).
• Identity Verification (KYC): To comply with our obligations to verify player age (21+), confirm identity, and prevent fraudulent account creation, money laundering, and underage gambling. KYC checks may be performed at registration, before processing large withdrawals, or at any other point in the account lifecycle where verification is warranted.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial transactions for audit and reconciliation purposes.
• Platform Delivery: To provide you with access to sports betting markets (cricket, football, kabaddi), live casino tables, slots, arcade games, and Royal Fishing games, and to personalise your experience based on your usage history and preferences.
• Bonus and Promotions Administration: To determine your eligibility for welcome bonuses, reload bonuses, and seasonal promotions (including Eid, Pohela Boishakh, and Victory Day special offers), and to track the fulfilment of wagering requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints submitted to [email protected] in a timely and effective manner.
• Responsible Gaming: To monitor for signs of problematic gambling behaviour, administer self-exclusion requests, deposit limits, session time limits, and cooling-off periods, and to communicate responsible gaming resources to players who may need them.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, collusion, bonus abuse, automated bot usage, and any other activity that may harm the integrity of the crn77 platform or the safety of its players.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records required for audit purposes.
• Platform Improvement: To analyse aggregated usage patterns, test new features, and improve the performance, reliability, and user experience of the crn77 platform over time.
• Marketing Communications: To send you promotional emails or SMS messages about new games, bonuses, and platform features — but only where you have given your explicit consent to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].

crn77 does not use automated decision-making or profiling processes that produce legal or similarly significant effects on individual players without human review.

crn77 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of our data processing — account creation, payment processing, game delivery, and customer support — is necessary to perform the contract between you and crn77 as set out in our Terms & Conditions. Without this processing, we cannot provide you with the services you have requested.
• Legitimate Interests: crn77 processes certain data — such as technical logs, fraud detection signals, and platform analytics — on the basis of our legitimate interests in operating a secure, reliable, and commercially viable betting platform. We have assessed that these interests are not overridden by your privacy rights in the relevant contexts.
• Legal Obligation: KYC identity verification, transaction monitoring, and the retention of financial records are processed because crn77 is required to do so to comply with applicable anti-money laundering and platform integrity obligations.
• Consent: Where we send you marketing communications or place non-essential cookies on your device, we do so only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

crn77 does not sell, rent, or trade your personal data to any third party for marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share the financial data necessary to process your transactions with our payment partners, including the operators of bKash, Nagad, Rocket, and Upay mobile financial services, and the card network processors for Visa and Mastercard transactions. These partners receive only the data necessary to execute the specific transaction.
• Identity Verification Providers: We may share your identity documents and personal details with third-party KYC verification service providers for the purpose of validating your age and identity. These providers are bound by strict data processing agreements.
• Game Content Suppliers: Live casino and slot game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive session-level data (such as player identifier, stake amounts, and game round results) necessary to deliver and settle games. These providers do not receive your full personal profile.
• IT and Infrastructure Providers: crn77 uses cloud hosting, content delivery, and cybersecurity service providers to operate the platform. These providers access data only as necessary to deliver their contracted services and are not permitted to use that data for any independent purpose.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help crn77 understand how the platform is used and where improvements can be made. This data cannot be used to identify individual players.
• Legal and Regulatory Disclosure: crn77 may disclose personal data to law enforcement authorities, courts, or regulatory bodies where required to do so by law, or where necessary to protect the rights, property, or safety of crn77, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of crn77's assets, personal data held by crn77 may be transferred to the successor entity. We will notify affected players of any such transfer via the email address registered on their account.

In all cases where data is shared with third-party processors, crn77 maintains binding contractual agreements that require those parties to process your data in accordance with applicable data protection standards and to implement appropriate technical and organisational security measures.

crn77 uses cookies, web beacons, and similar tracking technologies to operate the platform effectively, maintain your session, and understand how players interact with different areas of the site. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preferences, and enable core betting and gaming functionality. These cookies cannot be disabled without materially impairing your ability to use crn77.
• Functional Cookies: These cookies remember your preferences — such as your preferred game lobby layout, previously viewed cricket markets, and responsible gaming settings — so that you do not need to re-enter them each time you visit.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the crn77 platform, which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used to improve platform performance and user experience.
• Security Cookies: These cookies help crn77 detect and prevent fraudulent login attempts, bot traffic, and other malicious activity by maintaining a consistent session fingerprint for authenticated users.

crn77 does not use third-party behavioural advertising cookies or cross-site tracking technologies that build profiles of your browsing behaviour across other websites for the purpose of targeted advertising.

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. You can choose to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in and using core platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

crn77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of your active crn77 account plus a minimum of 5 years following account closure, to satisfy record-keeping obligations related to financial transactions and identity verification.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping requirements applicable to online payment processing.
• KYC Documents: Identity verification documents (national ID scans, selfie photos, proof of address) are retained for the same period as account and identity data. Copies are stored in encrypted form with strictly controlled access.
• Customer Support Communications: Email correspondence and support chat transcripts are retained for 3 years from the date of the interaction, to enable consistent handling of escalated complaints and repeat enquiries.
• Technical and Usage Logs: Server logs, IP address records, and click-stream data are retained for 12 months from the date of collection, after which they are aggregated and anonymised for analytics purposes.
• Marketing Consent Records: Records of your marketing consent (including the date and method of opt-in) are retained for the duration of your account plus 2 years following account closure, to demonstrate compliance with consent requirements.
• Self-Exclusion Records: Where you have requested self-exclusion from the crn77 platform, your exclusion record is retained indefinitely to prevent inadvertent re-registration during the exclusion period.

Upon expiry of the applicable retention period, crn77 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

crn77 takes the security of your personal and financial data seriously and implements a comprehensive set of technical and organisational security measures to protect it from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and crn77 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon visible in your browser's address bar confirms that an encrypted connection is active.
• Password Security: Player passwords are stored using one-way cryptographic hashing algorithms. crn77 staff members cannot view your password in plain text. crn77 will never ask you for your password in any communication.
• Access Controls: Access to personal data within crn77's internal systems is restricted on a strict need-to-know basis. Staff members who do not require access to specific data categories in order to perform their role are not granted access to those categories.
• Intrusion Detection: crn77 operates real-time network monitoring and intrusion detection systems to identify and respond to suspicious activity or attempted data breaches promptly.
• Secure Data Centres: crn77's servers are hosted in data centres that operate physical security controls including access restrictions, CCTV monitoring, and environmental protection systems.
• Regular Security Audits: crn77 conducts periodic internal and third-party security audits of its platform infrastructure and data handling practices to identify and remediate vulnerabilities.

Despite these measures, no internet-based platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, crn77 will notify affected players promptly and take all reasonable steps to mitigate the impact of the breach.

You also have a role to play in keeping your account secure. You should use a strong, unique password for your crn77 account, never share your login credentials with anyone, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.

As a player on the crn77 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and we will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data crn77 holds about you, together with information about how that data is used, where it came from, and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly within your crn77 account settings, or contact support for assistance with changes to identity or financial data.
• Right to Erasure: You have the right to request that crn77 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing is based. Please note that crn77 may be unable to fulfil an erasure request where retention is required to comply with a legal obligation (such as financial record-keeping requirements) or to establish, exercise, or defend legal claims.
• Right to Restrict Processing: You have the right to request that crn77 suspend the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to crn77 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where crn77 relies on legitimate interests as the legal basis for that processing. crn77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where crn77 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

crn77 will not charge a fee for handling data rights requests in ordinary circumstances. If a request is manifestly unfounded or excessive, crn77 reserves the right to charge a reasonable administrative fee or decline to act, providing written reasons for that decision.

The crn77 platform is strictly intended for adults aged 21 and above. crn77 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person who is under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered a crn77 account or provided personal information to crn77, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

crn77 operates strict age verification procedures as part of our KYC process and participates in responsible gaming initiatives specifically designed to prevent underage gambling. For further details, please visit our Responsible Gaming page.

crn77 operates a platform that is accessible from Bangladesh and serves players primarily located in Bangladesh. However, the technical infrastructure that supports the platform — including cloud hosting, game content delivery networks, and payment processing gateways — may involve the transfer of personal data to servers or service providers located outside Bangladesh.

Where such international transfers occur, crn77 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual clauses in agreements with third-party processors that impose data protection obligations equivalent to those applicable in the context of this platform.

By using the crn77 platform, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh. crn77 takes all reasonable steps to ensure that such transfers are conducted securely and that your data is afforded an appropriate level of protection at all times.

The crn77 platform may contain references to third-party game providers, payment services, and sports data feeds. Where links to external websites or services are presented, please be aware that those external destinations operate under their own independent privacy policies, over which crn77 has no control and for which crn77 accepts no responsibility.

crn77 recommends that you review the privacy policy of any third-party service you access in connection with your use of the platform, including the privacy policies of bKash, Nagad, Rocket, Upay, Visa, and Mastercard, as well as the policies of game content suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe.

The inclusion of any third-party reference on the crn77 platform does not imply endorsement of that third party's data practices by crn77.

crn77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made, crn77 will notify registered players via a prominent notice on the platform and, where practicable, via email to the address registered on the Player's account, at least 14 days before the revised policy takes effect.

The date at the top of this page will always indicate when the Privacy Policy was last updated. Your continued use of the crn77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should stop using the platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how crn77 is protecting your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way crn77 handles your personal data, please contact our support team using the details below. All privacy-related correspondence must be submitted in English.

• Data Privacy Email: [email protected] (plain text — not a clickable link)
• Subject Line: For data rights requests, please use the subject line "Data Rights Request" to ensure prompt routing to the appropriate team member.
• Response Time: General privacy enquiries within 24 hours; formal data rights requests within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays (Eid, Victory Day, Independence Day, Pohela Boishakh).
• Language: English only for formal data protection correspondence.

crn77 is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with the response you receive from our support team, you may escalate your complaint through the dispute resolution process described in our Terms & Conditions.