Your Privacy Matters
to 77ja

Introduction

Welcome to the 77ja Privacy Policy. 77ja operates the online casino and sports betting platform available at https://77ja.io (the "Platform"). This Privacy Policy explains how 77ja ("we", "us", or "our") collects, uses, processes, stores, and protects personal information relating to individuals who access or use our Platform ("you" or "your").

We understand that privacy is important to our players across Bangladesh. Whether you are based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh, this policy applies equally to you and governs all personal data processed in connection with your use of 77ja. We are committed to handling your data with transparency, integrity, and security at every stage.

By registering an account on or otherwise using the 77ja Platform, you acknowledge that you have read, understood, and agree to the collection and processing of your personal data as described in this Privacy Policy. This Policy should be read together with our Terms & Conditions. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to arrange account closure.

Data We Collect

77ja collects several categories of personal data in order to provide a safe, compliant, and high-quality gaming experience. The categories of data we collect are described below, along with examples of the specific data points within each category.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. If any such data is inadvertently submitted (for example, within a document provided for KYC), it will not be processed beyond what is strictly necessary for the verification purpose and will be stored with the same security measures applied to all personal data.

How We Collect Data

77ja collects personal data through a variety of channels depending on the nature of your interaction with the Platform. The primary collection methods are as follows:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer, you directly provide personal data to us.
• Automatic Technical Collection: When you access and navigate the Platform, we automatically collect technical and usage data through cookies, session tokens, server logs, and analytics tools embedded in the Platform.
• Payment Processors: When you complete a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, we receive transaction confirmation data from the relevant payment processor sufficient to verify and record the transaction.
• KYC Verification Partners: Where we use a third-party identity verification service to assist with age and identity checks, that partner may share verified data points with us as part of the verification outcome.
• Third-Party Game Providers: Game studios such as Evolution Gaming, Pragmatic Play, and NetEnt may provide us with gameplay event data (bets placed, game outcomes, session data) generated during your use of their games on the Platform.
• Publicly Available Sources: In limited circumstances and where permitted, we may supplement your profile with data from publicly available sources, such as fraud prevention databases or sanctions screening lists, as part of our anti-money laundering (AML) obligations.

How We Use Your Data

77ja uses the personal data it collects for clearly defined purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are set out below:

• Account Management: To create, maintain, verify, and administer your 77ja account, including processing your registration, managing your balance, and fulfilling your gameplay requests.
• Identity and Age Verification: To comply with our legal obligations and enforce our strict 21+ age restriction, we use your identity data to verify that you are who you claim to be and that you meet the minimum age requirement for use of the Platform.
• Transaction Processing: To process deposits and withdrawals via supported payment methods including bKash, Nagad, Rocket, and banking partners, and to maintain accurate financial records associated with your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, bonus abuse, and other misuse of the Platform.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, and any other regulatory obligations applicable to the operation of an online gaming platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 English-language support team.
• Responsible Gaming: To monitor gameplay patterns and identify signs of problem gambling, and to enforce self-exclusion requests, deposit limits, and cooling-off periods where activated.
• Platform Improvement: To analyse usage data and improve the design, functionality, and content of the Platform for the benefit of all players.
• Marketing Communications: Where you have opted in to receive marketing communications, to send you information about relevant promotions, bonuses, and seasonal offers. You may opt out at any time.
• Contractual Performance: To fulfil our contractual obligations to you under the Terms & Conditions, including the payment of winnings and the enforcement of wagering terms.

Legal Basis for Processing

Every instance of personal data processing by 77ja is grounded in a lawful basis. The primary legal bases on which we rely are:

• Contractual Necessity: Processing is necessary to perform our contract with you — namely, to provide the gaming services you have signed up for, process transactions, and fulfil bonus and promotion obligations.
• Legal Obligation: Processing is required to comply with our legal duties, including AML obligations, KYC requirements, and age verification mandates.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fraud-free, and commercially viable platform, where those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent — for example, for optional marketing communications or the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

77ja does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment Processing Partners: We share the minimum necessary financial data with payment processors such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to facilitate transactions. These partners process data under strict contractual obligations.
• KYC and Identity Verification Providers: We engage specialised third-party verification services to assist with identity and age verification. These providers receive only the data necessary to complete the verification check and are contractually prohibited from using it for any other purpose.
• Game Studio Providers: Game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive gameplay session data necessary to deliver and record the games you play.
• IT and Infrastructure Providers: We use trusted cloud hosting, cybersecurity, and IT support providers who may process data as data processors acting strictly on our instructions.
• Legal and Regulatory Authorities: We may be required to disclose your data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally obliged to do so — for example, under AML reporting obligations or in response to a valid court order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third-party service providers with whom we share data are required to process it in accordance with applicable data protection standards and solely for the purposes for which it was shared. We do not permit them to use your data for their own commercial purposes.

Cookies and Tracking Technologies

77ja uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the Platform. A cookie is a small text file placed on your device when you visit a website. The cookies used on 77ja fall into the following categories:

• Strictly Necessary Cookies: These are essential for the Platform to function. They manage session authentication, security tokens, and core navigation. You cannot opt out of strictly necessary cookies while using the Platform.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and game lobby filter selections to provide a more personalised experience.
• Analytics Cookies: These help us understand how players navigate the Platform — which pages are visited most frequently, where users encounter difficulties, and how gameplay sessions are structured. This data is used in aggregate, anonymised form to improve the Platform.
• Marketing and Attribution Cookies: With your consent, these cookies help us understand which promotional channels led you to 77ja and which offers resonated with you. They are not used to serve advertising on third-party websites.

You may manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. Strictly necessary cookies cannot be disabled without rendering the Platform inoperable. Our cookie preferences tool, accessible from the Platform, allows you to adjust non-essential cookie settings at any time.

Data Retention

77ja retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods we apply are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• KYC Verification Documents: Retained for the period required by applicable KYC regulations, typically a minimum of five (5) years following the end of the customer relationship.
• Support Communications: Retained for up to three (3) years following the resolution of the relevant support interaction, unless a longer retention period is required for dispute resolution or legal purposes.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained indefinitely for aggregated analytics purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, with a record of the withdrawal itself retained for compliance purposes.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. If you request deletion of your data before a mandatory retention period has elapsed, we will restrict processing of that data to the minimum necessary to comply with our legal obligations and will delete it as soon as those obligations permit.

Data Security

The security of your personal data is a top priority at 77ja. We implement a robust, multi-layered security framework designed to protect your information against unauthorised access, loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the 77ja Platform is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) technology, ensuring that your personal and financial data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields including passwords, financial account references, and verification document identifiers are encrypted at rest using strong cryptographic standards.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access specific categories of personal data.
• Real-Time Fraud Monitoring: Automated monitoring systems scan transaction activity and account behaviour in real time to detect and flag suspicious patterns consistent with fraud, money laundering, or account takeover attempts.
• Regular Security Audits: We conduct periodic internal security reviews and engage external security specialists to assess and strengthen our data protection infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your personal data, we maintain an incident response plan that includes timely notification procedures in accordance with applicable legal requirements.

While 77ja employs every reasonable technical and organisational measure to protect your data, no digital platform can guarantee absolute security. You play an important role in keeping your account secure — please use a strong, unique password, do not share your login credentials, and contact us immediately at [email protected] if you suspect any unauthorised access to your account.

Your Rights

As a person whose data is processed by 77ja, you have a number of rights in relation to your personal information. These rights are summarised below. To exercise any of them, please contact our support team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe and, where required by law, within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Object: Where we process your data on the basis of legitimate interests, you have the right to object to that processing. We will comply unless we have compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request a copy of the data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting prior processing.

Children and Minors

The 77ja Platform is strictly restricted to adults aged 21 years and older. We do not knowingly collect, process, or store personal data from any individual under the age of 21. If we become aware that an account has been registered by a person under the minimum age, we will immediately suspend the account, delete any personal data associated with it to the extent permitted by our legal obligations, and withhold any funds pending investigation.

If you are a parent or guardian and believe that a minor in your care has accessed the Platform and provided personal data, please contact us immediately at [email protected]. We take underage access extremely seriously and will take prompt action to address any confirmed instance.

Third-Party Links

The 77ja Platform may, in certain sections, reference or display content relating to third-party game studios or payment providers. While we take care in the partners we work with, we are not responsible for the privacy practices of any third-party website, application, or service that exists outside the 77ja Platform. This Privacy Policy applies exclusively to data processing carried out by 77ja in connection with our Platform.

We encourage you to review the privacy notices and policies of any third-party services you use — particularly payment providers such as bKash and Nagad, whose handling of your payment data is governed by their own privacy frameworks and not by this Policy.

Changes to This Policy

77ja reserves the right to update or amend this Privacy Policy at any time. We will post the revised Policy on this page with an updated "Last Updated" date at the top. Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — we will endeavour to provide additional notice via your registered email address or via a prominent notice on the Platform.

Your continued use of the Platform after any updated Privacy Policy has been posted constitutes your acceptance of the revised terms. We recommend checking this page periodically to stay informed of how 77ja manages your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 77ja handles your personal data, please reach out to our dedicated support team using the contact details below. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the 77ja Platform
• Response Time: We aim to acknowledge all privacy-related requests within 48 hours and provide a substantive response within 30 calendar days