ctg77 Privacy Policy

This Privacy Policy ("Policy") sets out the data processing practices of ctg77, the operator of the online betting and casino platform accessible at https://ctg77.ws and all associated sub-pages, mobile interfaces, and services (collectively, "the Platform"). ctg77 is committed to protecting the privacy of all individuals whose personal data it processes in connection with the Platform.

This Policy applies to all registered account holders, visitors who access the Platform without a registered account, and any person whose personal data is processed by ctg77 in connection with an application, inquiry, or interaction with the Platform. It covers data collected through the Platform website, through our customer support channels, and through any other means by which ctg77 receives personal data from or about you.

By registering a ctg77 account, making a deposit, placing a bet, participating in a game, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, storage, and sharing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the ctg77 Platform.

ctg77 collects personal data in several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect, the specific data points within each category, and the primary purpose for which each category is collected.

2.1 Data You Provide Directly

The majority of personal data ctg77 holds about you is data you provide directly during account registration, during the KYC verification process, when making deposits or requesting withdrawals, and when contacting our support team. Providing this data is a prerequisite for accessing the full features of the ctg77 Platform; however, you may browse portions of the Platform without providing any personal data.

2.2 Data Collected Automatically

When you access the ctg77 Platform, certain technical data is collected automatically by our servers. This includes your IP address, the type and version of the web browser or app you are using, your device's operating system, the date and time of your visit, the pages you navigate to, the duration of your session, and the referring URL if you arrived at the Platform via a link. This data is collected through server logs and, where applicable, through cookies and similar tracking technologies as described in Section 5.

2.3 Data from Third Parties

ctg77 may receive personal data about you from third parties in limited circumstances, including from payment processors (such as bKash, Nagad, Rocket, and Upay) where transaction confirmation data is passed to ctg77 as part of the payment flow, and from fraud prevention and identity verification service providers where ctg77 engages such services to assist in the KYC process. In all cases, ctg77 ensures that third parties sharing data with us have a lawful basis for doing so.

ctg77 uses the personal data it collects for the following purposes. For each purpose, we have identified the data categories involved and the legal basis on which the processing relies (detailed further in Section 4).

• Account registration and management: Processing your identity and contact data to create and maintain your ctg77 account, verify your eligibility, and manage your account preferences and settings.
• Identity verification and KYC compliance: Processing your identity data and verification documents to confirm that you meet ctg77's eligibility requirements, including the 21+ age restriction, and to fulfil our obligations under applicable anti-money laundering and counter-terrorist financing requirements.
• Payment processing: Processing your financial data to facilitate deposits, withdrawals, bonus credits, and refunds in Bangladeshi Taka (৳) via your chosen payment method.
• Provision of betting and gaming services: Processing your usage data to record bets placed, game rounds completed, winnings credited, and to settle markets and games accurately in accordance with our published rules.
• Responsible gaming: Monitoring your betting patterns and account activity to identify indicators of problem gambling and to administer responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) where requested or where required to protect your welfare.
• Fraud prevention and platform security: Analysing usage data, IP data, and device information to detect and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, and other forms of prohibited conduct as defined in our Terms and Conditions.
• Customer support: Using your identity data, contact data, and communications data to resolve support inquiries, manage formal complaints, and provide assistance in English to Bangladesh players 24/7.
• Marketing and promotions: Sending you information about ctg77 bonuses, promotions, new games, cricket betting markets (BPL, IPL, T20 World Cup), and seasonal offers via email or SMS, but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting support at ctg77.ws.
• Platform improvement: Using aggregated and anonymised usage data to analyse player behaviour patterns, improve the Platform's user experience, optimise game performance, and develop new features and services.
• Legal and regulatory compliance: Retaining records of identity, financial, and transactional data for the periods required by applicable law, and disclosing data to competent authorities where required by a lawful order or regulatory requirement.

Every processing activity conducted by ctg77 in relation to your personal data is carried out on one of the following legal bases:

• Contract performance: Processing that is necessary to perform the contract between you and ctg77 (i.e., the Terms and Conditions you accepted upon registration), including account creation, payment processing, bet settlement, and withdrawal handling. Without this processing, ctg77 cannot provide you with the services described in the Terms and Conditions.
• Legal obligation: Processing that is required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, counter-terrorist financing (CTF) obligations, age verification requirements, and obligations to retain financial records for defined periods. ctg77 cannot waive these obligations on request.
• Legitimate interests: Processing that serves ctg77's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for platform improvement. ctg77 has assessed these interests and determined that they are proportionate and do not unreasonably infringe on your rights.
• Consent: Processing that is carried out on the basis of your freely given, specific, and informed consent. This applies primarily to the sending of direct marketing communications by email or SMS. You may withdraw consent at any time, and withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The ctg77 Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session security, and collect the usage data described in Section 2. This section explains the types of cookies we use and how you can manage them.

5.1 Essential Cookies

Essential cookies are required for the ctg77 Platform to function correctly. They enable you to log in to your account, maintain your session across pages, preserve your language and display preferences, and process deposits and withdrawals securely. Essential cookies cannot be disabled without impairing your ability to use the Platform. They do not collect personally identifiable information beyond what is necessary for session management.

5.2 Analytical Cookies

ctg77 uses analytical cookies to collect aggregated, anonymised data about how users navigate the Platform. This data helps us understand which pages and features are most used, how long sessions last, where users encounter difficulties, and how the Platform performs across different devices and browsers used by Bangladesh players. Analytical data is processed in aggregate and is not linked to individual account profiles.

5.3 Security Cookies

Security cookies are used to support fraud detection and account security functions. They help ctg77 identify suspicious login attempts, detect devices associated with previously flagged fraudulent activity, and distinguish legitimate users from automated bots. Security cookies are a component of the Platform's multi-layered security infrastructure.

5.4 Managing Cookies

You can manage or delete cookies through your browser settings. Most browsers allow you to view the cookies currently stored, block all cookies, block third-party cookies only, or clear cookies when you close the browser. Please note that disabling essential cookies will prevent you from logging in to your ctg77 account and will impair core Platform functionality. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

ctg77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: ctg77 shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard to process your deposit and withdrawal transactions. These providers are contractually bound to process data solely for the purpose of transaction execution and are prohibited from using it for any other purpose.
• Identity verification providers: Where ctg77 engages third-party KYC and identity verification service providers to assist in the verification of account holder documents, the relevant identity data and verification documents are shared with those providers under contractual data processing agreements that require them to maintain the same standard of data protection as ctg77.
• Game studios and content providers: Game providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, Spribe, Play'n GO, and others may receive anonymised session and game round data as part of the technical integration required to deliver their games on the ctg77 Platform. These providers do not receive your name, contact details, or financial data unless required for the specific purpose of resolving a game dispute.
• Fraud prevention and security services: ctg77 may share IP addresses, device fingerprints, and behavioural data with specialist fraud prevention providers to assist in the detection and prevention of fraudulent activity on the Platform.
• Legal and regulatory authorities: ctg77 will disclose personal data to competent governmental, regulatory, law enforcement, or judicial authorities where required to do so by a lawful order, subpoena, regulatory requirement, or applicable law. ctg77 will, where legally permitted, notify the affected account holder of any such disclosure.
• Business transfers: In the event that ctg77's business or any part of it is acquired, merged, or transferred to another entity, personal data held by ctg77 may be transferred as part of that transaction. In such an event, ctg77 will notify affected account holders prior to the transfer and will ensure that the receiving entity is bound by privacy obligations equivalent to those in this Policy.

ctg77 retains personal data for as long as necessary to fulfil the purposes for which it was collected and for as long as required by applicable law. The following retention periods apply to the main categories of personal data held by ctg77:

Upon expiry of the applicable retention period, personal data is securely deleted from ctg77's active systems and backups using industry-standard data destruction procedures, or is anonymised in a manner that permanently prevents re-identification. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or formal complaint, the extended retention period is documented and reviewed at regular intervals.

ctg77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures include but are not limited to:

• Encryption in transit: All data transmitted between your browser or device and the ctg77 Platform is protected by TLS 1.3 encryption. This applies to login sessions, deposit and withdrawal flows, KYC document uploads, and all other data exchanges between you and the Platform.
• Encryption at rest: Personal data and financial data stored on ctg77's servers is encrypted at rest using AES-256 encryption. Encryption keys are managed in a dedicated key management system separate from the data stores they protect.
• Access controls: Access to systems containing personal data is restricted to ctg77 personnel with a documented operational need for that access. All access is authenticated via multi-factor authentication and is logged in a tamper-evident audit trail reviewed by ctg77's security team.
• Vulnerability management: ctg77 conducts regular security assessments of the Platform infrastructure, including penetration testing and vulnerability scanning. Identified vulnerabilities are triaged and remediated in accordance with a risk-based patching schedule.
• Incident response: ctg77 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to affected individuals, ctg77 will notify affected account holders without undue delay and will implement containment and remediation measures as a matter of priority.

As a ctg77 account holder whose personal data is processed by ctg77, you have the following rights in relation to that data. To exercise any of these rights, contact ctg77 support at support at ctg77.ws, providing your registered account username and a description of your request.

• Right of access: You have the right to request a copy of the personal data ctg77 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. ctg77 will provide this information within 30 days of receiving a verified request.
• Right to rectification: If any personal data ctg77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. ctg77 will action valid rectification requests within 14 days and will notify any third parties to whom the inaccurate data was disclosed, where technically feasible.
• Right to erasure: You may request that ctg77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. This right is subject to ctg77's legal obligations to retain certain data for defined periods as described in Section 7.
• Right to restriction: You may request that ctg77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and a determination is pending.
• Right to data portability: Where your data is processed on the basis of consent or contract performance and is processed by automated means, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format and to have it transmitted directly to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is carried out on the basis of ctg77's legitimate interests. ctg77 will cease processing upon receipt of a valid objection unless ctg77 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, contact support at ctg77.ws.

ctg77 will not charge a fee for handling standard data rights requests. In cases where requests are manifestly unfounded or excessive, ctg77 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for that decision.

The ctg77 Platform is strictly intended for adults aged 21 years and above. ctg77 does not knowingly collect, process, or retain personal data from any person under the age of 21. The ctg77 registration process includes an age verification step, and all accounts are subject to full KYC verification that confirms the account holder's date of birth against a valid government-issued identity document.

If ctg77 becomes aware that personal data has been collected from a person under 21 — whether as a result of a failed age verification, a parental complaint, or any other means — ctg77 will immediately suspend the associated account, delete all personal data collected in connection with that account, and return any deposited funds to the originating payment method where technically possible.

If you are a parent or guardian and believe that your child has registered an account on the ctg77 Platform, please contact support at ctg77.ws immediately with details of the account. ctg77 treats all reports of underage account registration as a priority matter and will respond within 24 hours of receipt.

ctg77 operates its Platform primarily to serve players based in Bangladesh and processes the majority of personal data on servers located within or in close proximity to the Bangladesh Standard Time (UTC+6) region. However, certain third-party service providers engaged by ctg77 — including game studios, fraud prevention providers, and identity verification services — may process data in other jurisdictions.

Where personal data is transferred to a third party located in a jurisdiction outside Bangladesh, ctg77 ensures that appropriate safeguards are in place to protect the data during and after the transfer. These safeguards include contractual clauses in data processing agreements that require the receiving party to maintain a standard of data protection equivalent to that applied by ctg77, and technical security measures including encryption of data in transit.

ctg77 does not transfer personal data to jurisdictions that have been identified as presenting unacceptable data protection risks without implementing additional compensating controls. If you have questions about the specific jurisdictions in which your data may be processed by ctg77's third-party service providers, please contact support at ctg77.ws.

ctg77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — ctg77 will notify registered account holders via the email address or mobile number registered on their account at least 14 calendar days before the revised Policy takes effect.

Minor updates, including corrections of typographical errors, clarifications that do not alter the substance of any provision, or updates to reflect new third-party service providers added under existing processing categories, may be made without advance notice. The effective date displayed at the top of this document and in the document header will be updated to reflect the date on which any revised version of this Policy came into force.

We encourage you to review this Privacy Policy periodically to stay informed about how ctg77 protects your personal data. The current version of this Policy is always available at https://ctg77.ws/privacy-policy. Continued use of the ctg77 Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ctg77 processes your personal data, please contact our support team using the details below. All privacy-related inquiries are handled in English by team members who are available 24 hours a day, 7 days a week, on Bangladesh Standard Time (UTC+6).

When submitting a data rights request, please include your registered account username, the email address associated with your account, and a clear description of the right you wish to exercise and the data concerned. ctg77 may request additional verification of your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorised parties.

For concerns that cannot be resolved through ctg77's support team, you may seek further assistance from a relevant data protection authority or consumer rights body in your jurisdiction.