Privacy Policy — How 777j Handles Your Data

1 Introduction

777j ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or otherwise interacts with the 777j platform at https://777j.pro. This Privacy Policy sets out the basis on which personal data collected from you, or provided by you, will be processed by 777j. It covers the types of data we collect, the purposes for which we use it, the parties with whom we may share it, the period for which we retain it, and the rights you hold with respect to your own information.

777j operates primarily as an online betting and casino entertainment platform serving players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All operations are conducted in English and all player communications are handled by the 777j support team on Bangladesh Standard Time (BST, UTC+6).

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and 777j. Where a conflict exists between this Privacy Policy and any other document, this Privacy Policy shall prevail with respect to personal data matters.

If you have questions about how 777j handles your personal data, please contact our support team at [email protected] before using the platform. Continued use of the platform after the effective date of this policy constitutes your acceptance of its terms.

2 Data We Collect

777j collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the primary categories of data we collect and the specific data points within each category.

777j does not collect or process sensitive personal data categories (such as racial or ethnic origin, political opinions, religious beliefs, health data beyond what is directly relevant to a responsible gaming assessment, or biometric data) unless required by law or explicitly provided by you in the context of a responsible gaming request.

3 How We Collect Data

777j collects personal data through the following channels and mechanisms:

• Direct Registration: When you create an account on 777j, you provide Identity Data and Contact Data directly via the registration form. This data is submitted voluntarily as a precondition of account creation.
• Account Activity: As you use the platform — depositing funds, placing bets, playing casino games, claiming bonuses, or withdrawing winnings — Betting & Gaming Data and Financial Data are generated and recorded automatically by our systems.
• Payment Processing: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor transmits a transaction reference and status to our systems. We receive confirmation data rather than raw payment credentials.
• Identity Verification: Where 777j requires you to verify your identity (for example, prior to processing a large withdrawal or in response to a fraud alert), you may be asked to upload a scanned copy of a government-issued ID. This document is reviewed by our compliance team and then securely deleted or archived in accordance with our retention schedule.
• Cookies and Tracking Technologies: When you visit the 777j website, Technical Data is collected automatically via cookies, web beacons, and server logs. See Section 7 for full details of our cookies and tracking practices.
• Support Interactions: Any communication you initiate with the 777j support team — via live chat, email, or the formal complaints process — is recorded as Communication Data for quality assurance and dispute resolution purposes.
• Third-Party Sources: In limited circumstances, 777j may receive data about you from third-party sources, including fraud prevention databases, identity verification services, and game providers. Data received from third parties is used solely for the purposes described in Section 4 and is subject to the same security standards as data collected directly.

4 Purpose of Processing

777j processes personal data for the following clearly defined purposes. We process only the minimum data necessary for each purpose and do not use data collected for one purpose for a materially different purpose without your knowledge.

777j does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. Where data is shared with third parties, it is strictly for the purposes listed in Section 6 and is governed by data processing agreements that impose obligations equivalent to those described in this policy.

5 Legal Basis for Processing

Every data processing activity conducted by 777j rests on one of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 777j — specifically, to operate your account, process payments, settle bets, and provide casino services. Without this processing, 777j cannot deliver the services you have registered to use.
• Legal Obligation: Processing is necessary to comply with legal obligations applicable to 777j's operations, including anti-money-laundering (AML) requirements, age verification mandates, responsible gaming regulations, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for 777j's legitimate business interests, provided those interests are not overridden by your rights. Legitimate interests pursued by 777j include fraud detection, platform security, abuse prevention, and improving the quality of our services through anonymised analytics.
• Consent: Where processing is not covered by the above bases — specifically, the sending of direct marketing communications and the use of non-essential cookies — 777j relies on your explicit, freely given, specific, and informed consent. You may withdraw consent at any time by contacting [email protected] or by adjusting your account communication preferences, without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

777j shares personal data with third parties only where necessary and only under strict conditions. The categories of third-party recipients are as follows:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to facilitate deposits and withdrawals. Each processor acts as an independent data controller for the transaction data it processes under its own privacy terms.
• Game Providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other licensed suppliers — receive a unique player session token and game interaction data necessary to deliver their games. Game providers do not receive your full identity data.
• Identity Verification Services: Third-party KYC (Know Your Customer) and age verification providers may process a copy of your identity document and biographic data for the sole purpose of confirming your identity and age.
• Fraud Prevention & Security Partners: 777j may share Technical Data and Account Data with fraud detection services to identify and block suspicious account activity, multi-accounting, and financial crime.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory mandate, 777j may disclose personal data to competent authorities. Such disclosures are made only to the extent strictly required and are documented internally.
• IT Infrastructure & Cloud Services: 777j uses reputable cloud hosting and infrastructure providers to store and process platform data. These providers operate as data processors under contractual obligations that prohibit them from using your data for any purpose other than delivering the contracted service.

7 Cookies & Tracking Technologies

777j uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state while you are logged in, and gather anonymised analytics data to improve the user experience.

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific domains. Please note that disabling strictly necessary cookies will prevent you from logging into your 777j account and using core platform features. Adjusting analytics or marketing cookie preferences does not affect your ability to use the platform.

8 Data Retention

777j retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the lifetime of your account and for a period of 5 years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for 7 years from the date of each transaction in compliance with financial reporting and AML obligations.
• Identity Verification Documents: Retained for 5 years following the completion of the verification process or account closure (whichever is later), then securely deleted.
• Support & Communication Records: Retained for 3 years from the date of the last communication, to support dispute resolution and service improvement reviews.
• Responsible Gaming Records: Self-exclusion records are retained for a minimum of 7 years to prevent re-registration during the exclusion period and to support responsible gaming audits.
• Technical & Analytics Data: Anonymised analytics data is retained indefinitely for platform improvement purposes. IP address logs are retained for 12 months, then deleted.
• Marketing Consent Records: Retained for 5 years from the date of consent or withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

9 Your Rights

As a data subject, you hold the following rights with respect to your personal data held by 777j. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". 777j will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 days.

10 Data Security

777j implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to reflect the evolving threat landscape and industry best practice.

Key security controls in place on the 777j platform include:

• Encryption in Transit: All data transmitted between your device and the 777j servers is encrypted using 256-bit SSL/TLS protocols. This applies to all pages of the platform, including the registration form, login page, deposit and withdrawal interfaces, and support chat.
• Encryption at Rest: Sensitive personal data fields — including identity document references and payment method identifiers — are encrypted at rest using AES-256. Passwords are never stored in plain text; they are hashed using bcrypt with appropriate salt rounds before storage.
• Payment Data Security: 777j does not store full payment credentials on its own servers. Card data processed via Visa and Mastercard is handled through PCI-DSS Level 1 compliant payment processors. Mobile wallet references (bKash, Nagad, Rocket, Upay) are stored as masked identifiers only.
• Access Controls: Access to personal data by 777j staff is governed by role-based access controls. Only staff members with a direct operational need to access specific data categories are granted that access. All internal data access events are logged and subject to periodic audit review.
• Anomaly Detection: 777j's security systems continuously monitor for unusual login patterns, IP address anomalies, and abnormal financial activity. Suspected security incidents trigger an automated alert and manual review process.
• Data Breach Response: In the event of a confirmed personal data breach that presents a risk to affected individuals, 777j will notify the relevant players via their registered email address and, where required, report the breach to the competent authority within the timeframes prescribed by applicable law.

While 777j takes all reasonable and practicable steps to safeguard your personal data, no online system is entirely immune from risk. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your 777j account has been accessed without your authorisation, contact [email protected] immediately.

11 Children's Privacy

777j strictly prohibits the use of its platform by any person under the age of 21. The platform is not directed at, and does not knowingly collect personal data from, individuals below the age of 21.

All registration applications are subject to an age verification check. Where 777j has reason to believe that an account holder is under 21 years of age, the account will be suspended immediately and an identity verification request will be issued. If verification confirms that the account holder is a minor, the account will be permanently closed, all associated data will be handled in accordance with our legal obligations, and any deposited funds will be returned to the source payment method after appropriate verification.

If you are a parent or guardian and you believe that a minor in your care has registered on the 777j platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate the matter promptly and take all necessary steps to close the account and protect the minor's data.

12 Policy Updates

777j reserves the right to update or amend this Privacy Policy at any time. Updates may be required to reflect changes in applicable law, changes in our data processing practices, the introduction of new platform features, or feedback from players and data protection authorities.

When a material change is made to this Privacy Policy — that is, a change that meaningfully affects how we collect, use, or share your personal data — 777j will notify all registered players via their registered email address at least 7 calendar days before the updated policy takes effect. The notification will summarise the nature of the change and include a link to the full updated text.

Non-material changes (such as corrections of typographical errors, clarifications that do not affect the substance of the policy, or formatting updates) may be made without advance notice. In all cases, the "Effective Date" shown at the top of this page will be updated to reflect the date on which the current version took effect.

Your continued use of the 777j platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you must cease using the platform and may request account closure by contacting [email protected] before the effective date.

All previous versions of the Privacy Policy are archived internally and are available upon written request. If you require a copy of a prior version, please email [email protected] with the subject line "Privacy Policy Archive Request" and the approximate date of the version you require.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 777j handles your personal data, please contact our dedicated data support team using the details below. All correspondence will be handled in English and responses will be provided within 5 business days (BST, UTC+6).

777j is committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response to a privacy concern, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.