wy77 Privacy Policy
Your privacy matters to us. This policy explains exactly what data wy77 collects, why we collect it, how we protect it, and what rights you have as a user on our platform.
How wy77 Protects Your Data
Introduction and Scope
This Privacy Policy ("Policy") describes how wy77 ("we", "us", "our") collects, processes, stores, and protects personal information provided by users ("you", "your") of the wy77 platform, including the website accessible at https://wy77.app, its mobile web interface, and all associated services. By accessing or using the wy77 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform.
This Policy applies to all personal data we process in connection with your use of the wy77 platform, regardless of whether you access the platform from Bangladesh or any other location. wy77 is committed to handling your personal information with care, transparency, and in compliance with applicable data protection principles. This Policy should be read in conjunction with the wy77 Terms and Conditions, which are incorporated by reference.
Information We Collect
wy77 collects personal data through several channels: information you provide directly during registration or support interactions, information generated automatically by your use of the platform, and information received from payment service providers as part of transaction processing. The categories of data we collect are set out in the table below:
| Data Category | Examples |
|---|---|
| Identity Data | Full name, date of birth, national ID number (for KYC), photograph |
| Contact Data | Registered mobile number (Bangladesh), email address if provided |
| Financial Data | bKash/Nagad/Rocket wallet reference, transaction history, deposit and withdrawal records |
| Technical Data | IP address, device type, browser type and version, operating system, session identifiers |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths, feature interactions |
How We Use Your Information
wy77 uses the personal data it collects for specific, limited, and legitimate purposes. We do not use your data in any way that is incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal data are:
- Account creation and management: To register your account, verify your identity, process your login credentials, and maintain your account in accordance with wy77 Terms and Conditions.
- Transaction processing: To process deposits, withdrawals, and bonus credits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This includes communicating with payment service providers and maintaining accurate transaction records.
- Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, KYC requirements, and fraud prevention standards. This includes verifying the identity of account holders and reporting suspicious activity where required.
- Platform security and fraud prevention: To monitor, detect, and investigate account activity that may indicate unauthorised access, fraudulent behaviour, multi-accounting, or bonus abuse. Technical data and usage data are central to this purpose.
- Responsible gaming: To monitor wagering patterns and identify players who may be at risk of problem gambling, and to facilitate player-requested self-exclusion, deposit limits, and cool-off periods as described in the Responsible Gaming policy.
- Platform improvement and analytics: To analyse aggregated and anonymised usage data to understand how users interact with the wy77 platform, identify technical issues, and improve game selection, navigation, and overall user experience. Analytics data is processed in aggregate form and is not used to profile individual users for marketing purposes.
Legal Basis for Processing
wy77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is necessary to perform the contract between you and wy77 — i.e., to create and manage your account, process bets and transactions, and deliver the services you have requested.
- Legal obligation: Processing that is necessary for wy77 to comply with applicable legal obligations, including KYC and AML requirements, and obligations to cooperate with competent authorities in investigations or legal proceedings.
- Legitimate interests: Processing that is necessary for wy77's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud detection, platform security monitoring, responsible gaming analysis, and aggregate analytics for platform improvement.
- Consent: Where wy77 relies on your consent as the legal basis for processing (for example, for sending optional promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Sharing Your Personal Information
wy77 does not sell your personal data. We share your personal data only in the following limited circumstances, and only to the extent strictly necessary for the relevant purpose:
- Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction reference data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and applicable payment industry security standards.
- Identity verification providers: Third-party KYC service providers may receive copies of your identity documents to perform age and identity verification checks on behalf of wy77. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
- Technology and infrastructure providers: Cloud hosting, database, and platform infrastructure providers who process data on our behalf under data processing agreements that bind them to appropriate security and confidentiality standards.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or legitimate request from a competent authority, wy77 may disclose account data and transaction records to the relevant authority. wy77 will only make such disclosures to the minimum extent required by the applicable legal obligation.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of wy77's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via a notice on the wy77 platform prior to the transfer taking effect.
Payment Data and Financial Privacy
wy77 takes the security of your financial data seriously. All payment transactions on the wy77 platform are processed through PCI-DSS compliant third-party payment gateways. wy77 does not store full card numbers, CVV codes, or complete mobile banking PINs on its systems. When you make a deposit via bKash, Nagad, or Rocket, the transaction is authenticated directly by the relevant payment provider via their own secure channel — wy77 receives only a transaction reference and confirmation status, not your mobile banking credentials.
Transaction records (amounts, dates, payment method type, and reference identifiers) are retained by wy77 for the period specified in our data retention policy. These records are maintained to support dispute resolution, regulatory compliance, and audit requirements. Access to financial transaction records is restricted to wy77 staff with verified operational need and appropriate authorisation.
Data Security Measures
wy77 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to, the following:
- Transport Layer Security (TLS 1.2 or higher) for all data transmitted between user devices and wy77 servers, ensuring that account credentials, financial data, and personal information cannot be intercepted in transit.
- OTP-based two-factor authentication delivered via SMS to your registered Bangladesh mobile number, applied to every account login. This ensures that even if your password is compromised, your account cannot be accessed without the OTP delivered to your registered number.
- Role-based access controls (RBAC) restricting internal staff access to personal data on a strict need-to-know basis. Staff who access user data are subject to confidentiality agreements, regular security training, and audit logging of all data access events.
- Encrypted storage for sensitive account data, including hashed and salted storage of passwords. wy77 does not store passwords in plaintext and cannot retrieve your original password — only a cryptographic hash is stored, which is compared against a hash of the password you provide at login.
No security measure is entirely foolproof, and wy77 cannot guarantee absolute security of data transmitted over the internet. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, wy77 will notify affected users without undue delay via the registered mobile number or email address on the account.
Data Retention
wy77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:
- Active account data (identity, contact, and account management data) is retained for the duration of your account and for a minimum of 5 years following permanent account closure, to support regulatory compliance, dispute resolution, and audit obligations.
- Transaction and financial records are retained for a minimum of 7 years following the date of the transaction, in accordance with standard financial record-keeping requirements applicable to online payment platforms operating in the Bangladesh market.
- Technical and usage data (server logs, session data, IP address logs) is retained for a maximum of 12 months in identifiable form, after which it is deleted or anonymised. Anonymised aggregate analytics data may be retained indefinitely as it no longer constitutes personal data.
Cookies and Tracking Technologies
wy77 uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device by your browser. wy77 uses only two categories of cookies:
- Essential cookies: These are strictly necessary for the platform to function. They include session cookies that maintain your logged-in state, security tokens used to prevent cross-site request forgery, and cookies that remember your language preference. Essential cookies cannot be disabled as the platform will not function correctly without them.
- Analytics cookies: wy77 uses anonymised analytics cookies to understand how users navigate the platform — for example, which pages are visited most frequently, which games are most popular, and where users encounter navigation difficulties. Analytics data is processed in aggregate and is not linked to individual user identities.
- wy77 does not use advertising cookies, retargeting cookies, or any third-party marketing cookies. No cookie placed by wy77 transmits your personal data to advertising networks or social media platforms.
- Device fingerprinting: For fraud prevention and multi-account detection purposes, wy77 may collect device fingerprint data (a combination of browser type, OS version, screen resolution, installed fonts, and other non-personally-identifiable technical signals). This data is used solely for security purposes and is not shared with third parties for marketing.
You can manage or delete cookies at any time through your browser settings. Disabling essential cookies will prevent you from logging into your wy77 account. Disabling analytics cookies will not affect your ability to use the platform. Refer to your browser's help documentation for instructions on managing cookies on your specific device.
Your Data Rights
As a user of the wy77 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact wy77 at [email protected]. wy77 will respond to all verified data rights requests within 30 days of receipt. Identity verification will be required before wy77 can process any data rights request.
- Right of access: You may request a copy of all personal data that wy77 holds about you, along with information about how that data is used and with whom it has been shared. wy77 will provide this information in a structured, commonly used format.
- Right of rectification: You may request that wy77 correct any inaccurate or incomplete personal data held about you. Where a correction is straightforward (such as correcting a misspelled name), wy77 will make the correction promptly. Where the correction is subject to identity verification requirements, wy77 may request supporting documentation.
- Right of erasure: You may request that wy77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that wy77 may retain data where required by applicable legal and regulatory obligations, even following an erasure request.
- Right to restrict processing: You may request that wy77 restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified, or where you have objected to processing based on legitimate interests and that objection is under review.
- Right to data portability: You may request that wy77 provide your personal data in a structured, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider. This right applies only to data you have provided directly to wy77 and which is processed on the basis of consent or contractual necessity.
Children's Privacy
The wy77 platform is strictly intended for users aged 21 years and above. wy77 does not knowingly collect, process, or store personal data from any person under the age of 21. If wy77 becomes aware that personal data has been collected from a user under the age of 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that a minor has registered an account or provided personal data to wy77 should contact us immediately at [email protected].
Changes to This Privacy Policy
wy77 reserves the right to update and revise this Privacy Policy at any time. When material changes are made to this Policy, wy77 will notify registered users by displaying a notice upon next login following the update, or by sending a notification to the registered mobile number. The updated Policy will be posted on this page with a revised "Last Updated" date. Your continued use of the wy77 platform after any update to this Policy constitutes your acceptance of the revised Policy.
We encourage you to review this Privacy Policy periodically to stay informed of how wy77 collects, uses, and protects your personal data. If you have questions about any change to this Policy, contact the wy77 support team at [email protected] before continuing to use the platform.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way wy77 handles your personal data, please contact our support team. All privacy-related enquiries should include your registered mobile number and a clear description of your query or request. Our team operates during Bangladesh Standard Time (BST, UTC+6) business hours and aims to respond to all privacy correspondence within two business days.
Privacy enquiries: [email protected]
Your data is protected. Explore cricket betting, live casino games, and 1,000+ slots — all on Bangladesh's trusted platform. For adults aged 21 and above only.
Explore wy77 Casino Read Our FAQ