Privacy Policy — How 777ja Protects Your Data

This Privacy Policy ("Policy") describes how 777ja ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Players", "you", "your") who access or use the 777ja online gaming platform at https://777ja.bio, including its mobile-optimised versions and any associated services.

777ja is committed to handling personal data responsibly and with respect for the privacy of every player. This Policy is written in plain English to ensure that all players — including those based in Dhaka, Chittagong, Sylhet, Khulna, and across Bangladesh — can clearly understand how their information is handled.

This Policy applies to all personal data collected through the platform, whether provided directly by you during registration, generated automatically through your use of the platform, or collected from third parties in connection with your account. It should be read alongside our Terms & Conditions and Responsible Gaming policy.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is 777ja, operating the platform at https://777ja.bio. The data controller determines the purposes for which, and the means by which, personal data is processed.

If you have any questions about this Policy, wish to exercise your data rights, or want to raise a concern about how your personal data is being handled, you may contact us at:

• Email: [email protected]
• Subject line: Privacy Enquiry
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 days.

777ja collects the following categories of personal data from players. The table below sets out each category, the specific data items within it, and the context in which that data is collected.

We collect only the minimum amount of personal data necessary for the purposes described in this Policy. We do not collect sensitive data such as biometric data, health data, or religious or political beliefs unless specifically required by applicable law.

777ja collects personal data through the following methods:

• Direct input: Data you provide when registering an account, completing your player profile, making a deposit or withdrawal, submitting identity documents, or contacting our support team.
• Automated collection: Technical data collected automatically by our systems when you access the platform — including IP addresses, browser fingerprints, session timestamps, and device identifiers. This data is collected via server logs and, where applicable, cookies.
• Third-party sources: In limited circumstances, 777ja may receive information about you from third-party identity verification services, fraud prevention databases, or payment processors. This information is used solely to verify your identity or to fulfil legal obligations.
• Gameplay activity: Records of your wagering activity are generated automatically as you use the platform's games and betting markets.

777ja processes your personal data only where there is a legitimate purpose and a valid legal basis for doing so. The table below summarises the main purposes for which we process personal data and the legal basis for each.

Where we rely on consent as a legal basis — for example, sending marketing emails about new promotions, seasonal offers around Eid or Pohela Boishakh, or new game releases — you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.

777ja does not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following limited circumstances:

• Payment processors: Your financial data is shared with payment service providers — including bKash, Nagad, Rocket, Upay, and card network operators — to the extent necessary to process your deposits and withdrawals.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data necessary to deliver their games within the 777ja platform. These providers operate under their own privacy frameworks and are not permitted to use your data for unrelated purposes.
• Identity verification partners: In carrying out Know Your Customer (KYC) and age verification checks, we may share identity documents and personal data with third-party verification service providers who are contractually bound to handle such data securely and confidentially.
• Legal and regulatory disclosure: Where required by applicable law, court order, or regulatory authority, 777ja may be obligated to disclose personal data. We will notify you of any such disclosure to the extent permitted by law.
• Anti-fraud and security: We may share data with fraud prevention databases and security partners where we have identified suspicious activity in connection with your account.

All third parties with whom 777ja shares personal data are required to maintain appropriate technical and organisational security measures and to use that data only for the purposes for which it was shared.

The 777ja platform uses cookies and similar tracking technologies to improve functionality, maintain session state, and analyse platform usage. Cookies are small text files placed on your device when you visit the platform.

777ja uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings and game display options — to personalise your experience on return visits.
• Analytical cookies: Used to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and other security threats.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core platform features, including account login and payment processing. 777ja does not use third-party advertising or behavioural tracking cookies.

777ja retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and operational requirements. The general retention principles applied by 777ja are as follows:

• Active account data: Retained for the full duration of your account being active on the platform.
• Post-closure account data: Following account closure, basic account records and identity data are retained for a minimum of five years to meet anti-money laundering and fraud-prevention obligations.
• Financial transaction records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of seven years in line with standard financial record-keeping requirements.
• Communications data: Support tickets and email correspondence are retained for up to three years following the resolution of the relevant enquiry.
• Technical and log data: Server logs and session data are retained for up to 12 months for security and fraud-prevention purposes, after which they are deleted or anonymised.

When personal data is no longer required for any legitimate purpose, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

777ja employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 777ja platform.
• Encrypted storage of sensitive account data, including passwords and payment information, using industry-standard cryptographic methods.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security assessments and monitoring of platform infrastructure for vulnerabilities and anomalous activity.
• Secure disposal of personal data that is no longer required for legitimate purposes.

While 777ja takes data security seriously and implements reasonable measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights, we will notify affected players promptly.

As a player on the 777ja platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request", including your registered username and a description of your request.

• Right of access: You may request a copy of all personal data 777ja holds about you. We will provide this in a clear, readable format within 30 days of receiving a verified request.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where there is no longer a legitimate reason to retain it. Note that this right is subject to legal and regulatory retention obligations that may require us to keep certain records.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data or object to a particular processing activity — you may request that we temporarily restrict how your data is processed while the matter is resolved.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interest, subject to our being able to demonstrate overriding legitimate grounds.
• Right to withdraw consent: Where we process your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid data rights requests within 30 days. In complex cases, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

The 777ja platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and to close the associated account.

If you are a parent or guardian and believe that a minor under your care has registered an account on 777ja or provided personal data to the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

777ja reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, we will notify registered players by sending an email to the address on file or by displaying a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this document indicates when the most recent revision was made. Your continued use of the 777ja platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 777ja handles your personal data. If you disagree with any changes to this Policy, you should stop using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 777ja holds about you, please reach out to our team using the contact details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: Privacy Enquiry
• Subject line for data rights requests: Data Rights Request
• Response time: We aim to acknowledge all enquiries within 5 business days and to provide a full response within 30 days.
• Support hours: Bangladesh Standard Time (BST, UTC+6) business hours.