Data Protection & Privacy — mi77 Platform
mi77 Privacy Policy
At mi77, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used, who it is shared with, and what rights you hold over your own information as a player on Bangladesh's most trusted online betting platform.
Encrypted at Every Step
All data transmitted between your device and mi77's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major financial institutions. Your login credentials, payment details, and personal information are never sent in plain text.
We Never Sell Your Data
mi77 does not sell, rent, or auction your personal information to third parties under any circumstances. Data shared with service providers is strictly limited to what is necessary for them to deliver the service — nothing more.
Your Rights, Respected
You have the right to access, correct, restrict, or request deletion of your personal data at any time. mi77 is committed to responding to all privacy requests within 10 business days. Contact our privacy team to exercise your rights.
Minimal Data Collection
mi77 collects only the personal data that is genuinely necessary to operate your account, process transactions, verify your identity, and comply with responsible gaming obligations. We do not collect data speculatively or beyond our stated purposes.
Defined Retention Periods
Personal data is not kept indefinitely. mi77 applies defined retention schedules to all data categories. Account data is retained for the period necessary to fulfil legal and regulatory obligations, after which it is securely deleted or anonymised.
Marketing Opt-Out
Promotional communications from mi77 are strictly opt-in. You may withdraw consent for marketing messages at any time through your account settings or by contacting support. Withdrawing marketing consent does not affect your ability to use the platform.
Section 1
Information We Collect
mi77 collects personal data through several channels: directly from you when you register and use the platform, automatically through your interactions with the website, and occasionally from third-party sources such as identity verification providers and payment processors. The categories of data we collect are set out below.
Registration & Identity Data
When you create a mi77 account, we collect the following information: your full legal name, date of birth, email address, mobile phone number, and the mobile financial service account details (bKash, Nagad, Rocket, or Upay) you register for deposits and withdrawals. This data is required to open your account, verify your identity, and process financial transactions. Without this information, we cannot provide the mi77 service.
Identity Verification (KYC) Data
To comply with our responsible gaming commitments and to prevent fraud and underage gambling, mi77 may request copies of identity documents such as your National Identity Card (NID), passport, or driver's licence. Where a payment method verification is required, we may also request a screenshot or statement from your mobile financial service account. KYC documents are handled with the highest level of care and are stored in an encrypted, access-controlled environment.
Transaction & Financial Data
We maintain a full record of all financial transactions conducted through your mi77 account, including deposit amounts, withdrawal requests, bonus credits, and bet settlements. Transaction records are retained as required by applicable financial regulations. We do not store full payment account credentials — only the reference identifiers necessary to process and reconcile transactions.
Usage & Behavioural Data
mi77 automatically collects data about how you interact with the platform, including pages visited, games played, betting patterns, session duration, device type, operating system, browser type, IP address, and approximate geographic location derived from your IP address. This data is used for platform optimisation, fraud detection, and responsible gaming monitoring.
Communication Data
When you contact mi77 customer support via live chat, email, or WhatsApp, we retain records of those communications. These records are used to resolve disputes, improve service quality, and maintain a history of your account interactions.
Email our privacy team:
Reference "Privacy Request" in your subject line. We respond within 10 business days.
Section 2
How We Use Your Data
Every piece of data that mi77 collects serves one or more defined purposes. The table below summarises the primary purposes for which we process personal data and the legal basis that justifies each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, email, mobile number, date of birth | Contract performance |
| Identity verification (KYC) | NID / passport, payment account reference | Legal obligation; responsible gaming |
| Processing deposits and withdrawals | Transaction data, payment account reference | Contract performance |
| Fraud and money laundering prevention | IP address, device data, transaction patterns | Legitimate interest; legal obligation |
| Responsible gaming monitoring | Betting patterns, session data, account history | Legal obligation; player protection |
| Customer support | Communication records, account data | Contract performance; legitimate interest |
| Platform analytics and improvement | Usage data, device data (anonymised where possible) | Legitimate interest |
| Promotional communications (opt-in only) | Email, mobile number | Consent |
mi77 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated tools are used for fraud detection or responsible gaming alerts, any resulting account action is reviewed by a member of the mi77 compliance team before being applied.
If we intend to use your data for a new purpose not described in this Privacy Policy, we will inform you in advance and, where required, seek your consent before proceeding.
Section 3
Data Sharing & Disclosure
mi77 does not sell, rent, or trade your personal data to any third party. Data is shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
Payment Processing Partners
To process your deposits and withdrawals, mi77 shares transaction reference data with the relevant mobile financial service providers — bKash, Nagad, Rocket, and Upay. The data shared is limited to what those providers require to authenticate and complete the transaction. Each payment partner operates under its own privacy policy and data protection obligations.
Identity Verification Providers
Where an identity verification check is required as part of the KYC process, mi77 may use a third-party verification service provider. Such providers receive only the data necessary to perform the verification check and are contractually prohibited from using that data for any other purpose.
Game Studio Providers
Casino and slot games on mi77 are delivered by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. A player session token — which does not contain your full personal details — is passed to the relevant game studio to initiate and maintain your game session. No additional personal data is transferred beyond what is technically necessary to deliver the game.
Legal and Regulatory Disclosure
mi77 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. In such cases, mi77 will disclose only the minimum data required to satisfy the legal obligation.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of mi77's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications before it takes effect, and the acquiring entity will be required to honour the terms of this Privacy Policy.
What We Will Never Do
- Sell your personal data to data brokers, advertising networks, or any commercial third party.
- Share your data with unrelated companies for their own marketing purposes.
- Disclose your betting history or financial data to any party not directly involved in delivering the mi77 service or fulfilling a legal obligation.
- Transfer your data outside of our defined service provider network without adequate data protection safeguards in place.
Section 4
Cookies & Tracking Technologies
Cookies are small text files placed on your device by a website you visit. mi77 uses both first-party cookies (set directly by mi77) and third-party cookies (set by our trusted service providers). The categories of cookies used are described below.
Essential Cookies
These cookies are strictly necessary for the mi77 platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without breaking core platform functionality. They do not track your activity across other websites.
Analytical Cookies
mi77 uses analytical cookies to understand how players use the platform — which pages are visited most, where users encounter difficulties, and how navigation can be improved. Analytical data is aggregated and anonymised wherever possible. These cookies help us continually improve the quality of the mi77 experience for players across Dhaka, Chittagong, Sylhet, and all of Bangladesh.
Fraud Detection Cookies
Certain cookies and device fingerprinting technologies are used specifically to detect and prevent fraudulent activity, including the identification of players who attempt to open multiple accounts to abuse bonuses or exploit the platform. These security cookies are essential to maintaining a fair and safe environment for all mi77 players.
Marketing & Preference Cookies
With your consent, mi77 may set cookies to remember your preferences and to deliver relevant promotional content within the platform. These cookies are only activated if you have opted in to receiving marketing communications. You may withdraw this consent at any time through your account settings, which will also deactivate the associated cookies.
Managing Your Cookie Preferences
You can control and delete cookies through your browser settings. Most modern browsers allow you to block cookies entirely or selectively. Please note that blocking essential cookies will prevent you from logging in to your mi77 account. Instructions for managing cookies in popular browsers are available through the browser's own help documentation. Clearing cookies will log you out of your current mi77 session.
Section 5
Data Security & Retention
mi77 applies a multi-layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
Technical Security Measures
All data in transit between your device and mi77's servers is encrypted using 256-bit SSL/TLS protocols. Data stored in mi77's systems is encrypted at rest. Access to personal data is restricted on a strict need-to-know basis using role-based access controls. Administrative access to production systems requires multi-factor authentication. System activity is logged and monitored continuously for anomalous behaviour.
Organisational Security Measures
mi77 staff who handle personal data are bound by confidentiality obligations and receive regular training on data protection responsibilities. Any third-party service provider that processes personal data on behalf of mi77 is required to enter into a data processing agreement that mandates equivalent security standards. mi77 conducts periodic reviews of its data security arrangements to identify and address emerging risks.
Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, mi77 will notify affected individuals without undue delay, providing details of what data was involved, the likely consequences of the breach, and the measures mi77 has taken or is taking to address it. mi77 maintains an internal incident response plan specifically for data security events.
Data Retention Periods
mi77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following guidelines:
- Active account data: Retained for the full duration of your account's existence and for a minimum of five (5) years following account closure, to satisfy financial record-keeping obligations.
- KYC / identity documents: Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial regulations.
- Customer support communications: Retained for three (3) years from the date of the last interaction, after which they are deleted or anonymised.
- Analytical and usage data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes; identifiable usage data is deleted or anonymised after 24 months.
- Marketing consent records: Retained until consent is withdrawn and for two (2) years thereafter as evidence of consent having been obtained.
When personal data is no longer required and the retention period has expired, mi77 will securely delete or irreversibly anonymise that data so that it can no longer be linked to any individual.
Section 6
Your Privacy Rights
As a player on the mi77 platform, you hold the following rights in relation to your personal data. These rights are not absolute — in some cases they may be subject to conditions, exceptions, or legal overrides — but mi77 is committed to honouring them fully wherever it is lawful and practicable to do so.
Right of Access
You have the right to request a copy of the personal data that mi77 holds about you. This is sometimes called a "Subject Access Request" or SAR. mi77 will provide a summary of your data in a clear and readable format. No fee is charged for a standard access request.
Right to Rectification
If any personal data that mi77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as your email address or phone number, you may be able to update these directly through your mi77 account settings. For KYC data that requires re-verification, please contact the support team.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that mi77 may be required to retain certain data to satisfy legal and regulatory obligations, even after you request erasure. In such cases, mi77 will explain the specific retention obligation.
Right to Restrict Processing
You have the right to ask mi77 to restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered. Where processing is restricted, mi77 will store your data but will not actively process it.
Right to Object
You have the right to object to mi77 processing your personal data where the legal basis for that processing is legitimate interest. If you object, mi77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
Right to Withdraw Consent
Where mi77 processes your data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, use the unsubscribe mechanism in any mi77 marketing message or contact the support team.
Section 7
Third-Party Services
The mi77 platform integrates with a number of third-party service providers to deliver a complete gaming and betting experience. Each provider listed below handles data only within the scope of its specific function, and each is bound by contractual data protection obligations.
Game Technology Providers
Live casino and slot games are delivered by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive an anonymised session token to manage your game session and calculate outcomes. They do not receive your full name, payment details, or contact information. All partner studios use certified RNG (Random Number Generator) software independently audited for fairness.
Mobile Payment Platforms
Deposits and withdrawals are processed via bKash, Nagad, Rocket, and Upay. These platforms receive only the transaction reference data required to authenticate and complete each payment. mi77 does not have access to your full mobile financial service account credentials. Each payment provider's own privacy policy governs how it handles your data within its own systems.
Analytics & Platform Monitoring
mi77 may use analytics tools to monitor platform performance, identify errors, and understand user behaviour at an aggregate level. Any analytics data shared with third-party tools is anonymised or pseudonymised before transmission, so that it cannot be used to identify you as an individual.
External Links
The mi77 website does not contain links to external third-party websites. Should this change in future, this Privacy Policy will be updated accordingly, and any external links will be clearly identified. mi77 is not responsible for the privacy practices of any external website that you choose to visit independently.
Changes to This Privacy Policy
mi77 reserves the right to amend this Privacy Policy at any time to reflect changes in how we handle personal data, changes in applicable law, or changes to our service offering. When we make material changes, we will notify registered players through the platform or by email before the changes take effect. The updated Privacy Policy will always be accessible at https://mi77.ws/privacy-policy. The effective date at the top of the policy indicates when the current version came into force. Your continued use of the platform following notification of changes constitutes your acceptance of the updated Privacy Policy.
Section 8
Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way mi77 handles your personal data, please reach out to us using the contact details below. We are committed to addressing all privacy-related enquiries promptly and transparently.
Email: — please use the subject line "Privacy Request" so your message is routed directly to the data protection team.
Live Chat: Available 24/7 directly on the mi77 platform. For privacy requests that require identity verification before we can act, email is the preferred channel.
Response Time: We acknowledge all privacy requests within 3 business days (Bangladesh Standard Time, UTC+6) and provide a substantive response within 10 business days. For complex requests — such as full data access requests or erasure requests involving multiple data categories — we may take up to 30 days, in which case we will inform you of the extended timeline at the point of acknowledgement.
mi77 takes every privacy enquiry seriously. If you are not satisfied with our response to your privacy request, you have the right to escalate your complaint through appropriate channels. We encourage you to contact us first, as we are committed to resolving all concerns fairly and efficiently.
Your Privacy is Our Priority
Have questions about how your data is handled? Explore our FAQ or contact support. Ready to play? mi77 offers cricket betting, live casino, slots, and more — all in a secure, trusted environment.
Read Our FAQ Terms & Conditions Login to mi77 18+ only | Play Responsibly | T&Cs Apply