Privacy Policy — Your Data, Our Commitment

mi77 ("the Platform", "we", "us", "our") is an online sports betting and casino platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We are committed to handling all personal data responsibly, transparently, and in accordance with applicable privacy and data protection principles.

This Privacy Policy applies to all users of the mi77 website located at mi77.im and any associated mobile applications or browser-based interfaces. It covers every stage of your relationship with mi77 — from the moment you first visit the site, through the account registration process, during active use of betting and casino features, and following account closure.

This policy should be read together with the mi77 Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and mi77.

mi77 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you use the site, and in limited cases from trusted third-party verification partners. The categories of data we collect are as follows:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement). 21+
• Registered mobile number and email address used for account access and communications.
• Residential address and city within Bangladesh (e.g., Dhaka, Chittagong, Sylhet).
• Government-issued identification documents submitted during KYC (Know Your Customer) verification, such as National ID card or passport.

2.2 Financial Information

• Mobile banking account identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposit and withdrawal processing.
• Bank account details where bank transfer is used for withdrawals.
• Transaction history including deposit amounts, withdrawal requests, and bonus activity, all denominated in Bangladeshi Taka (৳).

2.3 Technical & Usage Data

• IP address, browser type and version, device type and operating system.
• Pages visited, time spent on each page, referral source, and navigation paths through the mi77 platform.
• Betting and gaming activity logs, including markets bet on, game titles played, stake amounts, and outcomes.
• Session timestamps and duration, login history, and device fingerprint data used for fraud prevention.

2.4 Communications Data

• Records of communications between you and mi77 support via live chat or WhatsApp, including the content of those exchanges.
• Feedback, complaints, or dispute correspondence submitted through the platform.

The following table summarises the primary data categories and the purpose for which each is collected:

mi77 uses the personal data it collects strictly for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with those stated purposes without first obtaining your consent or being required to do so by law. The primary uses of your personal data are as follows:

• Account Management: Creating, maintaining, and administering your mi77 account, including processing deposits and withdrawals and tracking your betting activity.
• Identity Verification (KYC): Verifying your identity and age to ensure compliance with the 21+ age requirement and to prevent fraud and money laundering.
• Payment Processing: Facilitating secure deposit and withdrawal transactions through bKash, Nagad, Rocket, Upay, and bank transfer channels.
• Platform Security & Fraud Prevention: Monitoring account activity, detecting suspicious behaviour, preventing unauthorised access, and protecting the integrity of betting markets.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Responsible Gaming: Monitoring player behaviour to identify signs of problem gambling and to enable timely intervention, including enforcing deposit limits, cool-off periods, and self-exclusion requests.
• Legal & Regulatory Compliance: Meeting any legal obligations applicable to the operation of an online betting platform, including record-keeping requirements and co-operation with lawful information requests from competent authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with mi77 and to improve the design, performance, and feature set of the platform.

mi77 does not use your personal data to serve third-party advertising or to compile marketing profiles for sale to external parties. Any promotional communications from mi77 itself are sent only to players who have opted in to receive them and may be opted out of at any time.

mi77 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and mi77, including account management, payment processing, and game settlement.
• Legal Obligation: Processing is required for mi77 to comply with applicable legal and regulatory obligations, including KYC requirements, anti-money laundering obligations, and record-keeping duties.
• Legitimate Interests: Processing is necessary for the purposes of mi77's legitimate business interests, including fraud prevention, platform security, and improving service quality, provided those interests are not overridden by your own rights and interests.
• Consent: For processing activities that are not covered by the above bases — such as sending you optional marketing communications — mi77 will obtain your prior consent. You may withdraw consent at any time by contacting support.

mi77 does not sell or commercially transfer your personal data to third parties. However, we do share data with carefully selected third parties where it is necessary to operate the platform, meet legal obligations, or protect the interests of mi77 and its users. Categories of third parties with whom data may be shared include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners require certain personal and transaction data to process deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC and age verification services may receive identity document data to conduct verification checks on behalf of mi77.
• Game Content Providers: Providers such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi receive the minimum data necessary to deliver their games and settle game outcomes. These providers are bound by their own privacy obligations.
• Fraud Prevention & Security Services: Technical security partners may receive device and session data to assist in detecting and preventing fraudulent activity on the platform.
• Legal & Regulatory Authorities: Where required by law, court order, or the lawful request of a competent authority, mi77 will disclose personal data to the relevant body. mi77 will notify you of such a request where legally permitted to do so.

All third parties who receive personal data from mi77 are required to process that data in accordance with applicable data protection standards and only for the specific purpose for which it was shared. mi77 does not authorise third parties to use your data for their own independent marketing purposes.

The mi77 platform uses cookies and similar tracking technologies to enable essential site functionality, maintain your session state, detect fraud, and analyse platform usage. Cookies are small text files stored on your device by your web browser when you visit the mi77 website.

The types of cookies used by mi77 are as follows:

• Essential Cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences, such as language and display settings, to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised data about how users interact with the platform — pages visited, time spent, and navigation patterns — to help mi77 improve the service.
• Security & Fraud Detection Cookies: Used to recognise your device across sessions and to identify unusual activity patterns that may indicate account compromise or fraudulent behaviour.

You may control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the performance of the mi77 platform or prevent certain features from operating correctly. mi77 does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

mi77 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following general retention principles apply:

• Active Accounts: Personal data is retained for the full duration of an active account relationship, updated as necessary to remain accurate and current.
• Closed Accounts: Following account closure, mi77 retains identity, financial, and transaction records for a defined period to meet legal and regulatory record-keeping obligations, including anti-money laundering requirements.
• Support Communications: Records of support interactions are retained for quality assurance and dispute resolution purposes for a period consistent with the nature of the interaction.
• Technical & Usage Logs: Server logs and session data are typically retained for a shorter period, after which they are deleted or anonymised, unless a specific security or legal reason requires longer retention.

When personal data is no longer required and the applicable retention period has elapsed, mi77 will securely delete or anonymise that data so that it can no longer be associated with an individual. If you request deletion of your data before the end of the applicable retention period, mi77 will assess the request against any overriding legal obligations before responding.

As a user of the mi77 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the mi77 support team via live chat or WhatsApp. mi77 will respond to all verified requests within a reasonable timeframe:

• Right of Access: You may request a copy of the personal data that mi77 holds about you, together with information about how and why that data is being processed.
• Right to Rectification: If any personal data held by mi77 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to mi77's overriding legal obligations to retain certain records.
• Right to Restriction: You may request that mi77 restrict the processing of your data in specific situations, for example while a rectification request is being assessed.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. mi77 will assess your objection and cease processing unless compelling legitimate grounds exist to continue.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

mi77 will not charge a fee for processing a data rights request unless the request is manifestly unfounded, repetitive, or excessive. In such cases, a reasonable administrative fee may be applied. mi77 reserves the right to verify your identity before acting on any data rights request to protect against unauthorised access to personal data.

mi77 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Industry-standard SSL/TLS encryption applied to all data transmitted between your device and the mi77 platform.
• Encrypted storage of sensitive account data on access-controlled servers located in secure data centre facilities.
• Access to personal data within mi77 is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Real-time monitoring of platform traffic and account activity to detect and respond to security threats, unusual login patterns, and potential data breaches.
• Regular security reviews and vulnerability assessments of platform infrastructure and data handling processes.

While mi77 employs robust security measures, no online platform can guarantee absolute security. In the event of a data security incident that affects your personal data, mi77 will take prompt action to contain the incident and will notify affected users in accordance with applicable legal requirements.

You also have an important role to play in keeping your account secure. Please refer to the Account Management section of our Terms & Conditions for guidance on protecting your login credentials and reporting unauthorised access promptly.

The mi77 platform may contain references to third-party services such as payment gateways (bKash, Nagad, Rocket, Upay) or game providers (Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi). Where interactions with these services involve leaving the mi77 platform environment, the privacy practices of those third parties apply to data processed within their own systems.

mi77 is not responsible for the privacy policies or data practices of third-party platforms, payment processors, or game providers. We encourage you to review the privacy documentation of any third-party service you interact with in connection with your use of mi77. This Privacy Policy applies solely to data processed directly by mi77 through the mi77.im platform.

The mi77 platform is strictly intended for adults aged 21 years and above. 21+ mi77 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. The age verification procedures applied during registration are specifically designed to prevent underage access to the platform.

If mi77 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a registration attempt, a failed age verification check, or any other means — that data will be deleted promptly and the associated account will be closed without delay.

If you are a parent or guardian and have reason to believe that a minor in your care has provided personal data to mi77, please contact the support team immediately so that the matter can be investigated and any relevant data removed.

mi77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in data processing practices, new platform features, or evolving legal and regulatory requirements. When changes are made, the "Last Updated" date at the top of this document will be revised accordingly.

Where changes are material — meaning they significantly affect the way mi77 processes your personal data or the rights available to you — mi77 will make reasonable efforts to notify registered players through their registered contact details or via a prominent notice on the platform prior to the changes taking effect.

Continued use of the mi77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revisions to this Privacy Policy, you should cease using the platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mi77 handles your personal data, please contact the mi77 support team using any of the following channels. All contact details are provided as plain text and are not clickable links:

• Email: [email protected] — plain text, not a mailto link.
• WhatsApp: +880 1700-000000 — plain text, not a tel link.
• Live Chat: Available 24 hours a day, 7 days a week via the support widget on the mi77 platform. Response times are based on Bangladesh Standard Time (BST, UTC+6).

mi77 aims to acknowledge all data-related enquiries within 2 business days and to resolve substantive data rights requests within 30 calendar days, subject to the complexity of the request and any identity verification requirements that apply.